PT-2025-1200 · Moxa · Nat-102+9

Lars Haulin

·

Published

2025-01-03

·

Updated

2025-01-20

·

CVE-2024-9138

CVSS v4.0

8.6

High

VectorAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Moxa EDR-810 versions prior to the fixed version Moxa EDR-8010 versions prior to the fixed version Moxa EDR-G902 versions prior to the fixed version Moxa EDR-G903 versions prior to the fixed version Moxa EDR-G9004 versions prior to the fixed version Moxa EDR-G9010 versions prior to the fixed version Moxa EDF-G1002-BP versions prior to the fixed version Moxa NAT-102 versions prior to the fixed version Moxa OnCell G4302-LTE4 versions prior to the fixed version Moxa TN-4900 versions prior to the fixed version
Description The issue is related to the use of weak protection mechanisms and hard-coded credentials in Moxa devices, allowing an authenticated user to escalate privileges and gain root-level access to the system. This poses a significant security risk. The vulnerability may be exploited by a remote attacker.
Recommendations For Moxa EDR-810, upgrade to the latest firmware version. For Moxa EDR-8010, upgrade to the latest firmware version. For Moxa EDR-G902, upgrade to the latest firmware version. For Moxa EDR-G903, upgrade to the latest firmware version. For Moxa EDR-G9004, upgrade to the latest firmware version. For Moxa EDR-G9010, upgrade to the latest firmware version. For Moxa EDF-G1002-BP, upgrade to the latest firmware version. For Moxa NAT-102, restrict SSH access. For Moxa OnCell G4302-LTE4, upgrade to the latest firmware version. For Moxa TN-4900, upgrade to the latest firmware version.

Fix

Weakness Enumeration

CWE-656

Related Identifiers

BDU:2025-00566
CVE-2024-9138

Affected Products

Edf-G1002-Bp
Edr-8010
Edr-810
Edr-G9004
Edr-G9010
Edr-G902
Edr-G903
Nat-102
Oncell G4302-Lte4
Tn-4900