Read the docs
TI-2024-08726 Aliases CVE-2024-9404GHSA-2gj6-9934-w9r6

Denial-of-service in Moxa VPort 07-3 Series

Priority LOW 39CWE-1287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00746 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MoxaVPort 07-3 Series1.0—No fix listedCNA
MoxaEDS-608 Series1.0 – 3.12—No fix listedCNA
MoxaEDS-611 Series1.0 – 3.12—No fix listedCNA
MoxaEDS-616 Series1.0 – 3.12—No fix listedCNA
MoxaEDS-619 Series1.0 – 3.12—No fix listedCNA
MoxaEDS-405A Series1.0 – 3.14—No fix listedCNA
MoxaEDS-408A Series1.0 – 3.12—No fix listedCNA
MoxaEDS-505A Series1.0 – 3.11—No fix listedCNA
MoxaEDS-508A Series1.0 – 3.11—No fix listedCNA
MoxaEDS-510A Series1.0 – 3.12—No fix listedCNA
MoxaEDS-516A Series1.0 – 3.11—No fix listedCNA
MoxaEDS-518A Series1.0 – 3.11—No fix listedCNA
MoxaEDS-G509 Series1.0 – 3.10—No fix listedCNA
MoxaEDS-P510 Series1.0 – 3.11—No fix listedCNA
MoxaEDS-P510A Series1.0 – 3.11—No fix listedCNA
MoxaEDS-510E Series1.0 – 5.5—No fix listedCNA
MoxaEDS-518E Series1.0 – 6.3—No fix listedCNA
MoxaEDS-528E Series1.0 – 6.3—No fix listedCNA
MoxaEDS-G508E Series1.0 – 6.4—No fix listedCNA
MoxaEDS-G512E Series1.0 – 6.4—No fix listedCNA
MoxaEDS-G516E Series1.0 – 6.4—No fix listedCNA
MoxaEDS-P506E Series1.0 – 5.8—No fix listedCNA
MoxaICS-G7526A Series1.0 – 5.10—No fix listedCNA
MoxaICS-G7528A Series1.0 – 5.10—No fix listedCNA
MoxaICS-G7748A Series1.0 – 5.9—No fix listedCNA
MoxaICS-G7750A Series1.0 – 5.9—No fix listedCNA
MoxaICS-G7752A Series1.0 – 5.9—No fix listedCNA
MoxaICS-G7826A Series1.0 – 5.10—No fix listedCNA
MoxaICS-G7828A Series1.0 – 5.10—No fix listedCNA
MoxaICS-G7848A Series1.0 – 5.9—No fix listedCNA
MoxaICS-G7850A Series1.0 – 5.9—No fix listedCNA
MoxaICS-G7852A Series1.0 – 5.9—No fix listedCNA
MoxaIKS-G6524A Series1.0 – 5.10—No fix listedCNA
MoxaIKS-6726A Series1.0 – 5.9—No fix listedCNA
MoxaIKS-6728A Series1.0 – 5.9—No fix listedCNA
MoxaIKS-G6824A Series1.0 – 5.10—No fix listedCNA
MoxaSDS-3006 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-3008 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-3010 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-3016 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-G3006 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-G3008 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-G3010 Series1.0 – 3.0—No fix listedCNA
MoxaSDS-G3016 Series1.0 – 3.0—No fix listedCNA
MoxaPT-7728 Series1.0 – 3.9—No fix listedCNA
MoxaPT-7828 Series1.0 – 4.0—No fix listedCNA
MoxaPT-G503 Series1.0 – 5.3—No fix listedCNA
MoxaPT-G510 Series1.0 – 6.5—No fix listedCNA
  • VPort 07-3 Series VendorMoxa Affected 1.0 Fixed in — No fix listed CNA
  • EDS-608 Series VendorMoxa Affected 1.0 – 3.12 Fixed in — No fix listed CNA
  • EDS-611 Series VendorMoxa Affected 1.0 – 3.12 Fixed in — No fix listed CNA
  • EDS-616 Series VendorMoxa Affected 1.0 – 3.12 Fixed in — No fix listed CNA
  • EDS-619 Series VendorMoxa Affected 1.0 – 3.12 Fixed in — No fix listed CNA
  • EDS-405A Series VendorMoxa Affected 1.0 – 3.14 Fixed in — No fix listed CNA
  • EDS-408A Series VendorMoxa Affected 1.0 – 3.12 Fixed in — No fix listed CNA
  • EDS-505A Series VendorMoxa Affected 1.0 – 3.11 Fixed in — No fix listed CNA
  • EDS-508A Series VendorMoxa Affected 1.0 – 3.11 Fixed in — No fix listed CNA
  • EDS-510A Series VendorMoxa Affected 1.0 – 3.12 Fixed in — No fix listed CNA
  • EDS-516A Series VendorMoxa Affected 1.0 – 3.11 Fixed in — No fix listed CNA
  • EDS-518A Series VendorMoxa Affected 1.0 – 3.11 Fixed in — No fix listed CNA
  • EDS-G509 Series VendorMoxa Affected 1.0 – 3.10 Fixed in — No fix listed CNA
  • EDS-P510 Series VendorMoxa Affected 1.0 – 3.11 Fixed in — No fix listed CNA
  • EDS-P510A Series VendorMoxa Affected 1.0 – 3.11 Fixed in — No fix listed CNA
  • EDS-510E Series VendorMoxa Affected 1.0 – 5.5 Fixed in — No fix listed CNA
  • EDS-518E Series VendorMoxa Affected 1.0 – 6.3 Fixed in — No fix listed CNA
  • EDS-528E Series VendorMoxa Affected 1.0 – 6.3 Fixed in — No fix listed CNA
  • EDS-G508E Series VendorMoxa Affected 1.0 – 6.4 Fixed in — No fix listed CNA
  • EDS-G512E Series VendorMoxa Affected 1.0 – 6.4 Fixed in — No fix listed CNA
  • EDS-G516E Series VendorMoxa Affected 1.0 – 6.4 Fixed in — No fix listed CNA
  • EDS-P506E Series VendorMoxa Affected 1.0 – 5.8 Fixed in — No fix listed CNA
  • ICS-G7526A Series VendorMoxa Affected 1.0 – 5.10 Fixed in — No fix listed CNA
  • ICS-G7528A Series VendorMoxa Affected 1.0 – 5.10 Fixed in — No fix listed CNA
  • ICS-G7748A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • ICS-G7750A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • ICS-G7752A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • ICS-G7826A Series VendorMoxa Affected 1.0 – 5.10 Fixed in — No fix listed CNA
  • ICS-G7828A Series VendorMoxa Affected 1.0 – 5.10 Fixed in — No fix listed CNA
  • ICS-G7848A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • ICS-G7850A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • ICS-G7852A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • IKS-G6524A Series VendorMoxa Affected 1.0 – 5.10 Fixed in — No fix listed CNA
  • IKS-6726A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • IKS-6728A Series VendorMoxa Affected 1.0 – 5.9 Fixed in — No fix listed CNA
  • IKS-G6824A Series VendorMoxa Affected 1.0 – 5.10 Fixed in — No fix listed CNA
  • SDS-3006 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-3008 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-3010 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-3016 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-G3006 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-G3008 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-G3010 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • SDS-G3016 Series VendorMoxa Affected 1.0 – 3.0 Fixed in — No fix listed CNA
  • PT-7728 Series VendorMoxa Affected 1.0 – 3.9 Fixed in — No fix listed CNA
  • PT-7828 Series VendorMoxa Affected 1.0 – 4.0 Fixed in — No fix listed CNA
  • PT-G503 Series VendorMoxa Affected 1.0 – 5.3 Fixed in — No fix listed CNA
  • PT-G510 Series VendorMoxa Affected 1.0 – 6.5 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-9404
  2. 2026-10-03 Alias added: GHSA-2gj6-9934-w9r6

References

Advisory 3

  • TI-2021-17455 Hard-coded credentials in Moxa MXView Series CVSS 3.1CRITICAL 9.8
  • TI-2010-04465 Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5… CVSS 2.0HIGH 10.0
  • TI-2022-19087 A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008… CVSS 3.1HIGH 7.5
  • TI-2016-07634 Missing brute-force protection in Moxa NPort CVSS 3.1CRITICAL 9.8
  • TI-2021-17457 Cleartext transmission of sensitive information in Moxa MXView Series CVSS 3.1HIGH 7.5
  • TI-2022-19326 Information disclosure in Moxa SDS-3008 Series Industrial Ethernet Switch CVSS 3.1MEDIUM 5.3
See all 328 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences