certfr_avis - certfr-2025-avi-0044

CERTFR-2025-AVI-0044

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été découverte dans Moxa. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Moxa	N/A	EDS-608 Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-611 Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-616 Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-619 Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-405A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-408A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-505A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-508A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-510A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-516A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-518A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-G509 Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-P510 Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-P510A Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-510E Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-518E Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-528E Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-G508E Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-G512E Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-G516E Series sans les derniers correctifs de sécurité
Moxa	N/A	EDS-P506E Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7526A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7528A Seriesv sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7748A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7750A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7752A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7826A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7828A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7848A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7850A Series sans les derniers correctifs de sécurité
Moxa	N/A	ICS-G7852A Series sans les derniers correctifs de sécurité
Moxa	N/A	IKS-G6524A Series sans les derniers correctifs de sécurité
Moxa	N/A	IKS-6726A Series sans les derniers correctifs de sécurité
Moxa	N/A	IKS-6728A Series sans les derniers correctifs de sécurité
Moxa	N/A	IKS-G6824A Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-3006 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-3008 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-3010 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-3016 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-G3006 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-G3008 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-G3010 Series sans les derniers correctifs de sécurité
Moxa	N/A	SDS-G3016 Series sans les derniers correctifs de sécurité
Moxa	N/A	PT-7728 Series sans les derniers correctifs de sécurité
Moxa	N/A	PT-7828 Series sans les derniers correctifs de sécurité
Moxa	N/A	PT-G503 Series sans les derniers correctifs de sécurité
Moxa	N/A	PT-G510 Series sans les derniers correctifs de sécurité
Moxa	N/A	PT-G7728 Series sans les derniers correctifs de sécurité
Moxa	N/A	PT-G7828 Series sans les derniers correctifs de sécurité
Moxa	N/A	TN-4500A Series sans les derniers correctifs de sécurité
Moxa	N/A	TN-5500A Series sans les derniers correctifs de sécurité
Moxa	N/A	TN-G4500 Series sans les derniers correctifs de sécurité
Moxa	N/A	TN-G6500 Series sans les derniers correctifs de sécurité

References

Title

Publication Time

Tags

Bulletin de sécurité Moxa mpsa-241156

2025-01-17

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "EDS-608 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-611 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-616 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-619 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-405A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-408A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-505A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-508A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-510A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-516A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-518A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-G509 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-P510 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-P510A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-510E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-518E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-528E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-G508E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-G512E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-G516E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "EDS-P506E Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7526A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7528A Seriesv sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7748A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7750A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7752A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7826A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7828A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7848A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7850A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "ICS-G7852A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "IKS-G6524A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "IKS-6726A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "IKS-6728A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "IKS-G6824A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-3006 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-3008 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-3010 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-3016 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-G3006 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-G3008 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-G3010 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "SDS-G3016 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "PT-7728 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "PT-7828 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "PT-G503 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "PT-G510 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "PT-G7728 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "PT-G7828 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "TN-4500A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "TN-5500A Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "TN-G4500 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    },
    {
      "description": "TN-G6500 Series sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Moxa",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-9137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9137"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0044",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-01-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Moxa. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Moxa",
  "vendor_advisories": [
    {
      "published_at": "2025-01-17",
      "title": "Bulletin de s\u00e9curit\u00e9 Moxa mpsa-241156",
      "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches"
    }
  ]
}

CVE-2024-9137 (GCVE-0-2024-9137)

Vulnerability from cvelistv5 – Published: 2024-10-14 08:09 – Updated: 2025-09-19 08:08

Summary

The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.

Severity ?

8.8 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

9.4 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

Moxa

References

URL

Tags

	https://www.moxa.com/en/support/product-support/s…	vendor-advisory
	https://www.moxa.com/en/support/product-support/s…	vendor-advisory

Impacted products

Vendor

Product

Version

Moxa

EDR-8010 Series

Affected: 1.0 , ≤ 3.12.1 (custom)

Moxa	EDR-G9004 Series	Affected: 1.0 , ≤ 3.12.1 (custom)
Moxa	EDR-G9010 Series	Affected: 1.0 , ≤ 3.12.1 (custom)
Moxa	EDF-G1002-BP Series	Affected: 1.0 , ≤ 3.12.1 (custom)
Moxa	NAT-102 Series	Affected: 1.0 , ≤ 1.0.5 (custom)
Moxa	OnCell G4302-LTE4 Series	Affected: 1.0 , ≤ 3.9 (custom)
Moxa	TN-4900 Series	Affected: 1.0 , ≤ 3.6 (custom)
Moxa	EDS-608 Series	Affected: 1.0 , ≤ 3.12 (custom)
Moxa	EDS-611 Series	Affected: 1.0 , ≤ 3.12 (custom)
Moxa	EDS-616 Series	Affected: 1.0 , ≤ 3.12 (custom)
Moxa	EDS-619 Series	Affected: 1.0 , ≤ 3.12 (custom)
Moxa	EDS-405A Series	Affected: 1.0 , ≤ 3.14 (custom) Unaffected: 3.14.4 (custom)
Moxa	EDS-408A Series	Affected: 1.0 , ≤ 3.12 (custom) Unaffected: 3.14.6 (custom)
Moxa	EDS-505A Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	EDS-508A Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	EDS-510A Series	Affected: 1.0 , ≤ 3.12 (custom)
Moxa	EDS-516A Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	EDS-518A Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	EDS-G509 Series	Affected: 1.0 , ≤ 3.10 (custom)
Moxa	EDS-P510 Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	EDS-P510A Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	EDS-510E Series	Affected: 1.0 , ≤ 5.5 (custom)
Moxa	EDS-518E Series	Affected: 1.0 , ≤ 6.3 (custom)
Moxa	EDS-528E Series	Affected: 1.0 , ≤ 6.3 (custom)
Moxa	EDS-G508E Series	Affected: 1.0 , ≤ 6.4 (custom)
Moxa	EDS-G512E Series	Affected: 1.0 , ≤ 6.4 (custom)
Moxa	EDS-G516E Series	Affected: 1.0 , ≤ 6.4 (custom)
Moxa	EDS-P506E Series	Affected: 1.0 , ≤ 5.8 (custom)
Moxa	ICS-G7526A Series	Affected: 1.0 , ≤ 5.10 (custom)
Moxa	ICS-G7528A Series	Affected: 1.0 , ≤ 5.10 (custom)
Moxa	ICS-G7748A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	ICS-G7750A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	ICS-G7752A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	ICS-G7826A Series	Affected: 1.0 , ≤ 5.10 (custom)
Moxa	ICS-G7828A Series	Affected: 1.0 , ≤ 5.10 (custom)
Moxa	ICS-G7848A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	ICS-G7850A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	ICS-G7852A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	IKS-G6524A Series	Affected: 1.0 , ≤ 5.10 (custom)
Moxa	IKS-6726A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	IKS-6728A Series	Affected: 1.0 , ≤ 5.9 (custom)
Moxa	IKS-G6824A Series	Affected: 1.0 , ≤ 5.10 (custom)
Moxa	SDS-3006 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-3008 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-3010 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-3016 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-G3006 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-G3008 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-G3010 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	SDS-G3016 Series	Affected: 1.0 , ≤ 3.0 (custom)
Moxa	PT-7728 Series	Affected: 1.0 , ≤ 3.9 (custom)
Moxa	PT-7828 Series	Affected: 1.0 , ≤ 4.0 (custom)
Moxa	PT-G503 Series	Affected: 1.0 , ≤ 5.3 (custom)
Moxa	PT-G510 Series	Affected: 1.0 , ≤ 6.5 (custom)
Moxa	PT-G7728 Series	Affected: 1.0 , ≤ 6.4 (custom)
Moxa	PT-G7828 Series	Affected: 1.0 , ≤ 6.4 (custom)
Moxa	TN-4500A Series	Affected: 1.0 , ≤ 3.13 (custom)
Moxa	TN-5500A Series	Affected: 1.0 , ≤ 3.13 (custom)
Moxa	TN-G4500 Series	Affected: 1.0 , ≤ 5.5 (custom)
Moxa	TN-G6500 Series	Affected: 1.0 , ≤ 5.5 (custom)

Credits

Lars Haulin

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:moxa:edr-g9010:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "edr-g9010",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.12.1",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nat-102:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "nat-102",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "1.0.5",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:tn-4900:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tn-4900",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.6",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:oncell_g4302-lte4:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "oncell_g4302-lte4",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.9",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:edf-g1002-bp:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "edf-g1002-bp",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.12.1",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:edr-g9004:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "edr-g9004",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.12.1",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:edr-8010:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "edr-8010",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.12.1",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-9137",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-14T15:27:27.483068Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T14:32:26.853Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EDR-8010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDR-G9004 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDR-G9010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDF-G1002-BP Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NAT-102 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "1.0.5",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "OnCell G4302-LTE4 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TN-4900 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.6",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-608 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-611 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-616 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-619 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-405A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.14",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "3.14.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-408A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "3.14.6",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-505A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-508A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-510A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-516A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-518A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-G509 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-P510 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-P510A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-510E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.5",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-518E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.3",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-528E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.3",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-G508E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.4",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-G512E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.4",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-G516E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.4",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDS-P506E Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.8",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7526A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7528A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7748A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7750A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7752A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7826A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7828A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7848A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7850A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ICS-G7852A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IKS-G6524A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IKS-6726A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IKS-6728A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IKS-G6824A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-3006 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-3008 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-3010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-3016 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-G3006 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-G3008 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-G3010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SDS-G3016 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT-7728 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT-7828 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "4.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT-G503 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.3",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT-G510 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.5",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT-G7728 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.4",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PT-G7828 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "6.4",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TN-4500A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.13",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TN-5500A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.13",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TN-G4500 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.5",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TN-G6500 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "5.5",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Lars Haulin"
        }
      ],
      "datePublic": "2024-10-14T08:07:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.\u003c/p\u003e"
            }
          ],
          "value": "The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-216",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-216 Communication Channel Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-19T08:08:52.357Z",
        "orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
        "shortName": "Moxa"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Please refer to the security advisories:\u003cbr\u003e\u003cul\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances\"\u003eMissing Authentication and OS Command Injection Vulnerabilities in Cellular Routers, Secure Routers, and Network Security Appliances\u003c/a\u003e\u003cbr\u003e\u003c/li\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches\"\u003eCVE-2024-9137: Missing Authentication Vulnerability in Ethernet Switches\u003c/a\u003e\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Please refer to the security advisories:\n  *   Missing Authentication and OS Command Injection Vulnerabilities in Cellular Routers, Secure Routers, and Network Security Appliances https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances \n\n  *   CVE-2024-9137: Missing Authentication Vulnerability in Ethernet Switches https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Moxa Service Missing Authentication for Critical Function",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eTo mitigate the risks associated with this vulnerability, we recommend the following actions:\u003c/p\u003e\u003cul\u003e\u003cli\u003eDisable Moxa Service and Moxa Service (Encrypted) temporarily if they are not required for operations. This will minimize potential attack vectors until a patch or updated firmware is applied.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003eRefer to the \u003cem\u003eGeneral Security Best Practices\u003c/em\u003e\u0026nbsp;section to further strengthen your security posture.\u003c/p\u003e"
            }
          ],
          "value": "To mitigate the risks associated with this vulnerability, we recommend the following actions:\n\n  *  Disable Moxa Service and Moxa Service (Encrypted) temporarily if they are not required for operations. This will minimize potential attack vectors until a patch or updated firmware is applied.\n\n\nRefer to the General Security Best Practices\u00a0section to further strengthen your security posture."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
    "assignerShortName": "Moxa",
    "cveId": "CVE-2024-9137",
    "datePublished": "2024-10-14T08:09:22.689Z",
    "dateReserved": "2024-09-24T07:11:35.456Z",
    "dateUpdated": "2025-09-19T08:08:52.357Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2025-AVI-0044

Solutions

CVE-2024-9137 (GCVE-0-2024-9137)

Tags

Sightings

Nomenclature