CVEvulnerability

CVE-2024-4638

8.8 HIGH Published 2024-06-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-06-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.

Affected configurations

• moxa oncell g3470a-lte-eu-t firmware (<= 1.7.7) • moxa oncell g3470a-lte-eu firmware (<= 1.7.7) • moxa oncell g3470a-lte-us firmware (<= 1.7.7) • moxa oncell g3470a-lte-us-t firmware (<= 1.7.7)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References