Description
This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moxa | VPort 07-3 Series | 1.0 | — |
| Moxa | EDS-608 Series | 1.0 – ≤ 3.12 | — |
| Moxa | EDS-611 Series | 1.0 – ≤ 3.12 | — |
| Moxa | EDS-616 Series | 1.0 – ≤ 3.12 | — |
| Moxa | EDS-619 Series | 1.0 – ≤ 3.12 | — |
| Moxa | EDS-405A Series | 1.0 – ≤ 3.14 | — |
| Moxa | EDS-408A Series | 1.0 – ≤ 3.12 | — |
| Moxa | EDS-505A Series | 1.0 – ≤ 3.11 | — |
| Moxa | EDS-508A Series | 1.0 – ≤ 3.11 | — |
| Moxa | EDS-510A Series | 1.0 – ≤ 3.12 | — |
| Moxa | EDS-516A Series | 1.0 – ≤ 3.11 | — |
| Moxa | EDS-518A Series | 1.0 – ≤ 3.11 | — |
| Moxa | EDS-G509 Series | 1.0 – ≤ 3.10 | — |
| Moxa | EDS-P510 Series | 1.0 – ≤ 3.11 | — |
| Moxa | EDS-P510A Series | 1.0 – ≤ 3.11 | — |
| Moxa | EDS-510E Series | 1.0 – ≤ 5.5 | — |
| Moxa | EDS-518E Series | 1.0 – ≤ 6.3 | — |
| Moxa | EDS-528E Series | 1.0 – ≤ 6.3 | — |
| Moxa | EDS-G508E Series | 1.0 – ≤ 6.4 | — |
| Moxa | EDS-G512E Series | 1.0 – ≤ 6.4 | — |
| Moxa | EDS-G516E Series | 1.0 – ≤ 6.4 | — |
| Moxa | EDS-P506E Series | 1.0 – ≤ 5.8 | — |
| Moxa | ICS-G7526A Series | 1.0 – ≤ 5.10 | — |
| Moxa | ICS-G7528A Series | 1.0 – ≤ 5.10 | — |
| Moxa | ICS-G7748A Series | 1.0 – ≤ 5.9 | — |
| Moxa | ICS-G7750A Series | 1.0 – ≤ 5.9 | — |
| Moxa | ICS-G7752A Series | 1.0 – ≤ 5.9 | — |
| Moxa | ICS-G7826A Series | 1.0 – ≤ 5.10 | — |
| Moxa | ICS-G7828A Series | 1.0 – ≤ 5.10 | — |
| Moxa | ICS-G7848A Series | 1.0 – ≤ 5.9 | — |
| Moxa | ICS-G7850A Series | 1.0 – ≤ 5.9 | — |
| Moxa | ICS-G7852A Series | 1.0 – ≤ 5.9 | — |
| Moxa | IKS-G6524A Series | 1.0 – ≤ 5.10 | — |
| Moxa | IKS-6726A Series | 1.0 – ≤ 5.9 | — |
| Moxa | IKS-6728A Series | 1.0 – ≤ 5.9 | — |
| Moxa | IKS-G6824A Series | 1.0 – ≤ 5.10 | — |
| Moxa | SDS-3006 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-3008 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-3010 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-3016 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-G3006 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-G3008 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-G3010 Series | 1.0 – ≤ 3.0 | — |
| Moxa | SDS-G3016 Series | 1.0 – ≤ 3.0 | — |
| Moxa | PT-7728 Series | 1.0 – ≤ 3.9 | — |
| Moxa | PT-7828 Series | 1.0 – ≤ 4.0 | — |
| Moxa | PT-G503 Series | 1.0 – ≤ 5.3 | — |
| Moxa | PT-G510 Series | 1.0 – ≤ 6.5 | — |
Advisories 1
- WID-SEC-2025-0292 Moxa Switch (EDS, ICS, IKS und SDS): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Dec 14, 2025
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series vendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches vendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches vendor-advisory