Description (CNA)
This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Moxa / VPort 07-3 Series | affected 1.0 |
| Moxa / EDS-608 Series | affected 1.0 through 3.12 |
| Moxa / EDS-611 Series | affected 1.0 through 3.12 |
| Moxa / EDS-616 Series | affected 1.0 through 3.12 |
| Moxa / EDS-619 Series | affected 1.0 through 3.12 |
| Moxa / EDS-405A Series | affected 1.0 through 3.14 |
| Moxa / EDS-408A Series | affected 1.0 through 3.12 |
| Moxa / EDS-505A Series | affected 1.0 through 3.11 |
| Moxa / EDS-508A Series | affected 1.0 through 3.11 |
| Moxa / EDS-510A Series | affected 1.0 through 3.12 |
| Moxa / EDS-516A Series | affected 1.0 through 3.11 |
| Moxa / EDS-518A Series | affected 1.0 through 3.11 |
| Moxa / EDS-G509 Series | affected 1.0 through 3.10 |
| Moxa / EDS-P510 Series | affected 1.0 through 3.11 |
| Moxa / EDS-P510A Series | affected 1.0 through 3.11 |
| Moxa / EDS-510E Series | affected 1.0 through 5.5 |
| Moxa / EDS-518E Series | affected 1.0 through 6.3 |
| Moxa / EDS-528E Series | affected 1.0 through 6.3 |
| Moxa / EDS-G508E Series | affected 1.0 through 6.4 |
| Moxa / EDS-G512E Series | affected 1.0 through 6.4 |
| Moxa / EDS-G516E Series | affected 1.0 through 6.4 |
| Moxa / EDS-P506E Series | affected 1.0 through 5.8 |
| Moxa / ICS-G7526A Series | affected 1.0 through 5.10 |
| Moxa / ICS-G7528A Series | affected 1.0 through 5.10 |
| Moxa / ICS-G7748A Series | affected 1.0 through 5.9 |
| Moxa / ICS-G7750A Series | affected 1.0 through 5.9 |
| Moxa / ICS-G7752A Series | affected 1.0 through 5.9 |
| Moxa / ICS-G7826A Series | affected 1.0 through 5.10 |
| Moxa / ICS-G7828A Series | affected 1.0 through 5.10 |
| Moxa / ICS-G7848A Series | affected 1.0 through 5.9 |
| Moxa / ICS-G7850A Series | affected 1.0 through 5.9 |
| Moxa / ICS-G7852A Series | affected 1.0 through 5.9 |
| Moxa / IKS-G6524A Series | affected 1.0 through 5.10 |
| Moxa / IKS-6726A Series | affected 1.0 through 5.9 |
| Moxa / IKS-6728A Series | affected 1.0 through 5.9 |
| Moxa / IKS-G6824A Series | affected 1.0 through 5.10 |
| Moxa / SDS-3006 Series | affected 1.0 through 3.0 |
| Moxa / SDS-3008 Series | affected 1.0 through 3.0 |
| Moxa / SDS-3010 Series | affected 1.0 through 3.0 |
| Moxa / SDS-3016 Series | affected 1.0 through 3.0 |
| Moxa / SDS-G3006 Series | affected 1.0 through 3.0 |
| Moxa / SDS-G3008 Series | affected 1.0 through 3.0 |
| Moxa / SDS-G3010 Series | affected 1.0 through 3.0 |
| Moxa / SDS-G3016 Series | affected 1.0 through 3.0 |
| Moxa / PT-7728 Series | affected 1.0 through 3.9 |
| Moxa / PT-7828 Series | affected 1.0 through 4.0 |
| Moxa / PT-G503 Series | affected 1.0 through 5.3 |
| Moxa / PT-G510 Series | affected 1.0 through 6.5 |
CWE
CWE-1287
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches
ADP enrichment
No English description supplied.
No references supplied.