TI-2021-16658 CVE-2021-39279 · GHSA-h724-3h22-3p4x
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP.
Priority MEDIUM 46
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP.
Moxa
Records329All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical79CVSS 9.0–10.0
CVSS high181CVSS 7.0–8.9
Exploited now
Moxa records in CISA KEVNo Moxa vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Oncell G3470a-lte-eu-t Firmware · all components
TI-2018-08153 CVE-2018-11425 · GHSA-fg62-fmm9-g7xf
Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build…
Priority MEDIUM 45
Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424.
TI-2024-04318 CVE-2024-4641 · GHSA-9jqr-jfvv-cj9j
OnCell G3470A-LTE Series: Authenticated Format String Errors
Priority MEDIUM 42
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument.
TI-2024-04315 CVE-2024-4638 · GHSA-hqp3-hqc2-v62h
OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
Priority MEDIUM 40
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function.
TI-2024-04316 CVE-2024-4639 · GHSA-c8f8-j53j-393c
OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
Priority LOW 38
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration.
TI-2024-04317 CVE-2024-4640 · GHSA-5cpc-fv98-27hq
OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
Priority LOW 36
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations.
TI-2018-08152 CVE-2018-11424 · GHSA-9q52-rmx8-c9gh
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version…
Priority LOW 36
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425.
TI-2021-16657 CVE-2021-39278 · GHSA-vw6h-px5h-9j7r
Certain MOXA devices allow reflected XSS via the Config Import menu.
Priority LOW 29
Certain MOXA devices allow reflected XSS via the Config Import menu.