PT-2021-7483 · Moxa · Moxa Oncell G3470A-Lte+6

Published 2021-12-30 · Updated 2021-12-30 · CVE-2021-37757

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3150A-LTE versions (affected versions not specified) Moxa OnCell G3470A-LTE versions (affected versions not specified) Moxa WDR-3124A versions (affected versions not specified) Moxa AWK-3131A versions (affected versions not specified) Moxa AWK-4131A versions (affected versions not specified) Moxa AWK-1131A versions (affected versions not specified) Moxa AWK-1137C versions (affected versions not specified)

Description The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-06737

CVE-2021-37757

Affected Products

Moxa Awk-1131A

Moxa Awk-1137C

Moxa Awk-3131A

Moxa Awk-4131A

Moxa Oncell G3150A-Lte

Moxa Oncell G3470A-Lte

Moxa Wdr-3124A

References · 5

• https://bdu.fstec.ru/vul/2022-06737 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/awk-3131a-4131a-1131a-1137c-wireless-ap-bridge-client-vulnerabilities · Note
• https://moxa.ru/novosti/tidings/prod/ustranenie-uyazvimostej-ustrojstv-oncell-g3150a-g3470a-i-wdr-3124a · Note
• https://moxa.com/en/support/product-support/security-advisory/oncell-g3150a-g3470-wdr-3124a-cellular-gateways-router-vulnerabilities · Note
• https://dragos.com/advisory/moxa-multiple-vulnerabilities-2 · Note