PT-2021-7479 · Moxa · Moxa Oncell G3470A-Lte+6

Published 2021-12-30 · Updated 2021-12-30 · CVE-2021-37751

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3150A-LTE versions (affected versions not specified) Moxa OnCell G3470A-LTE versions (affected versions not specified) Moxa WDR-3124A versions (affected versions not specified) Moxa AWK-3131A versions (affected versions not specified) Moxa AWK-4131A versions (affected versions not specified) Moxa AWK-1131A versions (affected versions not specified) Moxa AWK-1137C versions (affected versions not specified)

Description The issue is related to an inconsistency in response handling for incoming requests in the firmware of certain Moxa industrial LTE modems and wireless access points. This could allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-204

Related Identifiers

BDU:2022-06728

CVE-2021-37751

Affected Products

Moxa Awk-1131A

Moxa Awk-1137C

Moxa Awk-3131A

Moxa Awk-4131A

Moxa Oncell G3150A-Lte

Moxa Oncell G3470A-Lte

Moxa Wdr-3124A

References · 5

• https://bdu.fstec.ru/vul/2022-06728 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/awk-3131a-4131a-1131a-1137c-wireless-ap-bridge-client-vulnerabilities · Note
• https://dragos.com/advisory/moxa-multiple-vulnerabilities-2 · Note
• https://moxa.ru/novosti/tidings/prod/ustranenie-uyazvimostej-ustrojstv-oncell-g3150a-g3470a-i-wdr-3124a · Note
• https://moxa.com/en/support/product-support/security-advisory/oncell-g3150a-g3470-wdr-3124a-cellular-gateways-router-vulnerabilities · Note