CVE-2024-9404 Denial-of-Service Vulnerability
This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.
Problem types: cwe_id: CWE-1287
description: CWE-1287: Improper Validation of Specified Type of Input
Affected products: vendor: Moxa
product: VPort 07-3 Series
default_status: unaffected
vendor: Moxa
product: EDS-608 Series
default_status: unaffected
vendor: Moxa
product: EDS-611 Series
default_status: unaffected
vendor: Moxa
product: EDS-616 Series
default_status: unaffected
vendor: Moxa
product: EDS-619 Series
default_status: unaffected
vendor: Moxa
product: EDS-405A Series
default_status: unaffected
vendor: Moxa
product: EDS-408A Series
default_status: unaffected
vendor: Moxa
product: EDS-505A Series
default_status: unaffected
vendor: Moxa
product: EDS-508A Series
default_status: unaffected
vendor: Moxa
product: EDS-510A Series
default_status: unaffected
vendor: Moxa
product: EDS-516A Series
default_status: unaffected
vendor: Moxa
product: EDS-518A Series
default_status: unaffected
vendor: Moxa
product: EDS-G509 Series
default_status: unaffected
vendor: Moxa
product: EDS-P510 Series
default_status: unaffected
vendor: Moxa
product: EDS-P510A Series
default_status: unaffected
vendor: Moxa
product: EDS-510E Series
default_status: unaffected
vendor: Moxa
product: EDS-518E Series
default_status: unaffected
vendor: Moxa
product: EDS-528E Series
default_status: unaffected
vendor: Moxa
product: EDS-G508E Series
default_status: unaffected
vendor: Moxa
product: EDS-G512E Series
default_status: unaffected
vendor: Moxa
product: EDS-G516E Series
default_status: unaffected
vendor: Moxa
product: EDS-P506E Series
default_status: unaffected
vendor: Moxa
product: ICS-G7526A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7528A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7748A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7750A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7752A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7826A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7828A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7848A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7850A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7852A Series
default_status: unaffected
vendor: Moxa
product: IKS-G6524A Series
default_status: unaffected
vendor: Moxa
product: IKS-6726A Series
default_status: unaffected
vendor: Moxa
product: IKS-6728A Series
default_status: unaffected
vendor: Moxa
product: IKS-G6824A Series
default_status: unaffected
vendor: Moxa
product: SDS-3006 Series
default_status: unaffected
vendor: Moxa
product: SDS-3008 Series
default_status: unaffected
vendor: Moxa
product: SDS-3010 Series
default_status: unaffected
vendor: Moxa
product: SDS-3016 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3006 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3008 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3010 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3016 Series
default_status: unaffected
vendor: Moxa
product: PT-7728 Series
default_status: unaffected
vendor: Moxa
product: PT-7828 Series
default_status: unaffected
vendor: Moxa
product: PT-G503 Series
default_status: unaffected
vendor: Moxa
product: PT-G510 Series
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: YU-HSIANG HUANG (huang.yuhsiang.phone@gmail.com) from Moxa's cybersecurity testing team
Published: 2024-12-04T03:54:32.073Z