CVE-2024-4640: high-severity vulnerability in Moxa OnCell G3150A-LTE Series
OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.4%
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Affected products
Moxa · OnCell G3150A-LTE SeriesRelated CVEs — Moxa OnCell G3150A-LTE Series
In the same product, most dangerous first.
CVE-2026-111461HIGHSMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE SeriesEPSS 1.4%CVE-2024-4639HIGHOnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSecEPSS 0.4%CVE-2024-4641MEDIUMOnCell G3470A-LTE Series: Authenticated Format String ErrorsEPSS 0.3%CVE-2026-111460HIGHStatic HTTPS private key and CA private key in firmware in OnCell G3150A-LTE SeriesEPSS 0.3%CVE-2023-6093MEDIUMOnCell G3150A-LTE Series: Clickjacking VulnerabilityEPSS 0.3%CVE-2023-6094MEDIUMOnCell G3150A-LTE Series: Web Server Transmits Cleartext CredentialsEPSS 0.2%