← CVE Intelligence

CVE-2024-9139

OS Command Injection in Restricted Command PUBLISHED

Description (CNA)

The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Moxa / EDR-8010 Series	affected 1.0 through 3.12.1
Moxa / EDR-G9004 Series	affected 1.0 through 3.12.1
Moxa / EDR-G9010 Series	affected 1.0 through 3.12.1
Moxa / EDF-G1002-BP Series	affected 1.0 through 3.12.1
Moxa / NAT-102 Series	affected 1.0 through 1.0.5
Moxa / OnCell G4302-LTE4 Series	affected 1.0 through 3.9
Moxa / TN-4900 Series	affected 1.0 through 3.6
Moxa / EDR-810 Series	affected 1.0 through 5.12.33

CWE

CWE-78

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.