PT-2021-3896 · Moxa · Moxa Oncell G3470A-Lte-Eu+7

Published 2021-09-01 · Updated 2021-09-09 · CVE-2021-39279

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MOXA WAC-2004 version 1.7 MOXA WAC-1001 version 2.1 MOXA WAC-1001-T version 2.1 MOXA OnCell G3470A-LTE-EU version 1.7 MOXA OnCell G3470A-LTE-EU-T version 1.7 MOXA TAP-323-EU-CT-T version 1.3 MOXA TAP-323-US-CT-T version 1.3 MOXA TAP-323-JP-CT-T version 1.3 MOXA WDR-3124A-EU version 2.3 MOXA WDR-3124A-EU-T version 2.3 MOXA WDR-3124A-US version 2.3 MOXA WDR-3124A-US-T version 2.3

Description The issue is related to authenticated command injection via the "/forms/web importTFTP" endpoint. This allows a remote attacker to elevate their privileges by exploiting the lack of measures to neutralize special elements used in operating system commands.

Recommendations For MOXA WAC-2004 version 1.7, consider disabling access to the "/forms/web importTFTP" endpoint until a patch is available. For MOXA WAC-1001 version 2.1, restrict access to the "/forms/web importTFTP" endpoint to minimize the risk of exploitation. For MOXA WAC-1001-T version 2.1, avoid using the "/forms/web importTFTP" endpoint until the issue is resolved. For MOXA OnCell G3470A-LTE-EU version 1.7, temporarily disable the "/forms/web importTFTP" endpoint. For MOXA OnCell G3470A-LTE-EU-T version 1.7, restrict access to the "/forms/web importTFTP" endpoint. For MOXA TAP-323-EU-CT-T version 1.3, consider disabling the "/forms/web importTFTP" endpoint. For MOXA TAP-323-US-CT-T version 1.3, avoid using the "/forms/web importTFTP" endpoint. For MOXA TAP-323-JP-CT-T version 1.3, restrict access to the "/forms/web importTFTP" endpoint. For MOXA WDR-3124A-EU version 2.3, temporarily disable the "/forms/web importTFTP" endpoint. For MOXA WDR-3124A-EU-T version 2.3, restrict access to the "/forms/web importTFTP" endpoint. For MOXA WDR-3124A-US version 2.3, consider disabling the "/forms/web importTFTP" endpoint. For MOXA WDR-3124A-US-T version 2.3, avoid using the "/forms/web importTFTP" endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2021-04287

CVE-2021-39279

Affected Products

Moxa Oncell G3470A-Lte-Eu

Moxa Tap-323-Eu-Ct-T

Moxa Tap-323-Jp-Ct-T

Moxa Tap-323-Us-Ct-T

Moxa Wac-1001

Moxa Wac-2004

Moxa Wdr-3124A-Eu

Moxa Wdr-3124A-Us

References · 7

• 🔥 https://packetstormsecurity.com/files/164014 · Exploit
• https://bdu.fstec.ru/vul/2021-04287 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-39279 · Security Note
• https://moxa.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-39279 · Vendor Advisory
• https://moxa.com/en/support/product-support/security-advisory/oncell-g3470a-wdr-3124a-cellular-gateways-router-vulnerabilities · Note
• https://moxa.com/en/support/product-support/security-advisory/tap-323-wac-1001-2004-wireless-ap-bridge-client-vulnerabilities · Note