CVEvulnerability

CVE-2024-4640

8.2 HIGH Published 2024-06-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-06-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weaknesses
CWE-120

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.

Affected configurations

• moxa oncell g3470a-lte-us-t firmware (<= 1.7.7) • moxa oncell g3470a-lte-eu firmware (<= 1.7.7) • moxa oncell g3470a-lte-eu-t firmware (<= 1.7.7) • moxa oncell g3470a-lte-us firmware (<= 1.7.7)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References