CVE-2024-9137: Moxa Service Missing Authentication for Critical Function
Moxa · EDR-8010 Series
Vendor fix available · Affected: Moxa EDR-8010 Series · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 43% of scored CVEs
DescriptionCVE.org
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Moxa · EDR-8010 Seriesfrom 1.0 up to and including 3.12.1
- Moxa · EDR-G9004 Seriesfrom 1.0 up to and including 3.12.1
- Moxa · EDR-G9010 Seriesfrom 1.0 up to and including 3.12.1
- Moxa · EDF-G1002-BP Seriesfrom 1.0 up to and including 3.12.1
- Moxa · NAT-102 Seriesfrom 1.0 up to and including 1.0.5
- Moxa · OnCell G4302-LTE4 Seriesfrom 1.0 up to and including 3.9
- Moxa · TN-4900 Seriesfrom 1.0 up to and including 3.6
- Moxa · EDS-608 Seriesfrom 1.0 up to and including 3.12
- Moxa · EDS-611 Seriesfrom 1.0 up to and including 3.12
- Moxa · EDS-616 Seriesfrom 1.0 up to and including 3.12
- Moxa · EDS-619 Seriesfrom 1.0 up to and including 3.12
- Moxa · EDS-405A Seriesfrom 1.0 up to and including 3.14
- Moxa · EDS-408A Seriesfrom 1.0 up to and including 3.12
- Moxa · EDS-505A Seriesfrom 1.0 up to and including 3.11
- Moxa · EDS-508A Seriesfrom 1.0 up to and including 3.11
- Moxa · EDS-510A Seriesfrom 1.0 up to and including 3.12
- Moxa · EDS-516A Seriesfrom 1.0 up to and including 3.11
- Moxa · EDS-518A Seriesfrom 1.0 up to and including 3.11
- Moxa · EDS-G509 Seriesfrom 1.0 up to and including 3.10
- Moxa · EDS-P510 Seriesfrom 1.0 up to and including 3.11
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Moxa
- Published
- October 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2024-9137 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.