CVE-2024-9139

OS Command Injection in Restricted Command

CVSS 8.6 HIGHEPSS 1.4%CWE-78

The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Moxa · EDF-G1002-BP Series Moxa · EDR-8010 Series Moxa · EDR-810 Series Moxa · EDR-G9004 Series Moxa · EDR-G9010 Series Moxa · NAT-102 Series Moxa · OnCell G4302-LTE4 Series Moxa · TN-4900 Series

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances