CVE-2024-9137 Moxa Service Missing Authentication for Critical Function
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Moxa
product: EDR-8010 Series
default_status: unaffected
vendor: Moxa
product: EDR-G9004 Series
default_status: unaffected
vendor: Moxa
product: EDR-G9010 Series
default_status: unaffected
vendor: Moxa
product: EDF-G1002-BP Series
default_status: unaffected
vendor: Moxa
product: NAT-102 Series
default_status: unaffected
vendor: Moxa
product: OnCell G4302-LTE4 Series
default_status: unaffected
vendor: Moxa
product: TN-4900 Series
default_status: unaffected
vendor: Moxa
product: EDS-608 Series
default_status: unaffected
vendor: Moxa
product: EDS-611 Series
default_status: unaffected
vendor: Moxa
product: EDS-616 Series
default_status: unaffected
vendor: Moxa
product: EDS-619 Series
default_status: unaffected
vendor: Moxa
product: EDS-405A Series
default_status: unaffected
vendor: Moxa
product: EDS-408A Series
default_status: unaffected
vendor: Moxa
product: EDS-505A Series
default_status: unaffected
vendor: Moxa
product: EDS-508A Series
default_status: unaffected
vendor: Moxa
product: EDS-510A Series
default_status: unaffected
vendor: Moxa
product: EDS-516A Series
default_status: unaffected
vendor: Moxa
product: EDS-518A Series
default_status: unaffected
vendor: Moxa
product: EDS-G509 Series
default_status: unaffected
vendor: Moxa
product: EDS-P510 Series
default_status: unaffected
vendor: Moxa
product: EDS-P510A Series
default_status: unaffected
vendor: Moxa
product: EDS-510E Series
default_status: unaffected
vendor: Moxa
product: EDS-518E Series
default_status: unaffected
vendor: Moxa
product: EDS-528E Series
default_status: unaffected
vendor: Moxa
product: EDS-G508E Series
default_status: unaffected
vendor: Moxa
product: EDS-G512E Series
default_status: unaffected
vendor: Moxa
product: EDS-G516E Series
default_status: unaffected
vendor: Moxa
product: EDS-P506E Series
default_status: unaffected
vendor: Moxa
product: ICS-G7526A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7528A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7748A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7750A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7752A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7826A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7828A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7848A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7850A Series
default_status: unaffected
vendor: Moxa
product: ICS-G7852A Series
default_status: unaffected
vendor: Moxa
product: IKS-G6524A Series
default_status: unaffected
vendor: Moxa
product: IKS-6726A Series
default_status: unaffected
vendor: Moxa
product: IKS-6728A Series
default_status: unaffected
vendor: Moxa
product: IKS-G6824A Series
default_status: unaffected
vendor: Moxa
product: SDS-3006 Series
default_status: unaffected
vendor: Moxa
product: SDS-3008 Series
default_status: unaffected
vendor: Moxa
product: SDS-3010 Series
default_status: unaffected
vendor: Moxa
product: SDS-3016 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3006 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3008 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3010 Series
default_status: unaffected
vendor: Moxa
product: SDS-G3016 Series
default_status: unaffected
vendor: Moxa
product: PT-7728 Series
default_status: unaffected
vendor: Moxa
product: PT-7828 Series
default_status: unaffected
vendor: Moxa
product: PT-G503 Series
default_status: unaffected
vendor: Moxa
product: PT-G510 Series
default_status: unaffected
vendor: Moxa
product: PT-G7728 Series
default_status: unaffected
vendor: Moxa
product: PT-G7828 Series
default_status: unaffected
vendor: Moxa
product: TN-4500A Series
default_status: unaffected
vendor: Moxa
product: TN-5500A Series
default_status: unaffected
vendor: Moxa
product: TN-G4500 Series
default_status: unaffected
vendor: Moxa
product: TN-G6500 Series
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.4
baseSeverity: CRITICAL
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
version: 3.1
Credits: lang: en
value: Lars Haulin
Published: 2024-10-14T08:09:22.689Z