Description
The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moxa | EDR-8010 Series | 1.0 – ≤ 3.12.1 | — |
| Moxa | EDR-G9004 Series | 1.0 – ≤ 3.12.1 | — |
| Moxa | EDR-G9010 Series | 1.0 – ≤ 3.12.1 | — |
| Moxa | EDF-G1002-BP Series | 1.0 – ≤ 3.12.1 | — |
| Moxa | NAT-102 Series | 1.0 – ≤ 1.0.5 | — |
| Moxa | OnCell G4302-LTE4 Series | 1.0 – ≤ 3.9 | — |
| Moxa | TN-4900 Series | 1.0 – ≤ 3.6 | — |
| Moxa | EDR-810 Series | 1.0 – ≤ 5.12.33 | — |
Advisories 2
- WID-SEC-2024-3154 Moxa Router: Mehrere Schwachstellen ermöglichen Dateimanipulation und Codeausführung BSI CERT-Bund (WID) · Dec 14, 2025
- NCSC-2024-0407 Kwetsbaarheden verholpen in Moxa systemen NCSC-NL (Netherlands) · Oct 14, 2024