CVE-2024-9137highCWE-306

CVE-2024-9137: fallo de gravedad alta en Moxa EDF-G1002-BP Series

Moxa Service Missing Authentication for Critical Function

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear EDR-G9010 Series+ Monitorear TN-4900 Series

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 0.5%
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Moxa · EDF-G1002-BP SeriesMoxa · EDR-8010 SeriesMoxa · EDR-G9004 SeriesMoxa · EDR-G9010 SeriesMoxa · EDS-405A SeriesMoxa · EDS-408A SeriesMoxa · EDS-505A SeriesMoxa · EDS-508A SeriesMoxa · EDS-510A SeriesMoxa · EDS-510E SeriesMoxa · EDS-516A SeriesMoxa · EDS-518A SeriesMoxa · EDS-518E SeriesMoxa · EDS-528E SeriesMoxa · EDS-608 SeriesMoxa · EDS-611 SeriesMoxa · EDS-616 SeriesMoxa · EDS-619 SeriesMoxa · EDS-G508E SeriesMoxa · EDS-G509 SeriesMoxa · EDS-G512E SeriesMoxa · EDS-G516E SeriesMoxa · EDS-P506E SeriesMoxa · EDS-P510A SeriesMoxa · EDS-P510 SeriesMoxa · ICS-G7526A SeriesMoxa · ICS-G7528A SeriesMoxa · ICS-G7748A SeriesMoxa · ICS-G7750A SeriesMoxa · ICS-G7752A SeriesMoxa · ICS-G7826A SeriesMoxa · ICS-G7828A SeriesMoxa · ICS-G7848A SeriesMoxa · ICS-G7850A SeriesMoxa · ICS-G7852A SeriesMoxa · IKS-6726A SeriesMoxa · IKS-6728A SeriesMoxa · IKS-G6524A SeriesMoxa · IKS-G6824A SeriesMoxa · NAT-102 SeriesMoxa · OnCell G4302-LTE4 SeriesMoxa · PT-7728 SeriesMoxa · PT-7828 SeriesMoxa · PT-G503 SeriesMoxa · PT-G510 SeriesMoxa · PT-G7728 SeriesMoxa · PT-G7828 SeriesMoxa · SDS-3006 SeriesMoxa · SDS-3008 SeriesMoxa · SDS-3010 SeriesMoxa · SDS-3016 SeriesMoxa · SDS-G3006 SeriesMoxa · SDS-G3008 SeriesMoxa · SDS-G3010 SeriesMoxa · SDS-G3016 SeriesMoxa · TN-4500A SeriesMoxa · TN-4900 SeriesMoxa · TN-5500A SeriesMoxa · TN-G4500 SeriesMoxa · TN-G6500 Series
CVEs relacionadas — Moxa EDF-G1002-BP Series

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-9140CRITICALCVE-2024-9140EPSS 1.8%CVE-2024-9139HIGHOS Command Injection in Restricted CommandEPSS 1.4%CVE-2024-9138HIGHPrivilege Escalation in Cellular Router, Secure Router, and Network Security AppliancesEPSS 1.1%CVE-2025-0676HIGHCommend Injection Leading to Privilege EscalationEPSS 1.0%CVE-2025-6893CRITICALCVE-2025-6893EPSS 0.7%CVE-2025-6950CRITICALCVE-2025-6950EPSS 0.6%