CVE-2024-9140criticalCWE-78

CVE-2024-9140: falha crítica em Moxa EDF-G1002-BP Series

Publicada em

Seguir esta CVE+ Monitorar EDR-G9010 Series+ Monitorar TN-4900 Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 1.8%
Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significant risk to the system’s security and functionality.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Moxa · EDF-G1002-BP SeriesMoxa · EDR-8010 SeriesMoxa · EDR-G9004 SeriesMoxa · EDR-G9010 SeriesMoxa · NAT-102 SeriesMoxa · OnCell G4302-LTE4 SeriesMoxa · TN-4900 Series
CVEs relacionadas — Moxa EDF-G1002-BP Series

No mesmo produto, das mais perigosas para as menos.

CVE-2024-9139HIGHOS Command Injection in Restricted CommandEPSS 1.4%CVE-2024-9138HIGHPrivilege Escalation in Cellular Router, Secure Router, and Network Security AppliancesEPSS 1.1%CVE-2025-0676HIGHCommend Injection Leading to Privilege EscalationEPSS 1.0%CVE-2025-6893CRITICALCVE-2025-6893EPSS 0.7%CVE-2025-6950CRITICALCVE-2025-6950EPSS 0.6%CVE-2025-6894MEDIUMCVE-2025-6894EPSS 0.6%