Description
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.
Metrics
CVSS 3.1 7.2/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | EDR-810 Series | >= 1.0, <= 5.12.37 |
| Moxa | EDR-8010 Series | >= 1.0, <= 3.13.1 |
| Moxa | EDR-G902 Series | >= 1.0, <= 5.7.25 |
| Moxa | EDR-G903 Series | >= 1.0, <= 5.7.25 |
| Moxa | EDR-G9004 Series | >= 1.0, <= 3.13.1 |
| Moxa | EDR-G9010 Series | >= 1.0, <= 3.13.1 |
| Moxa | EDF-G1002-BP Series | >= 1.0, <= 3.13.1 |
| Moxa | NAT-102 Series | >= 1.0, <= 1.0.5 |
| Moxa | OnCell G4302-LTE4 Series | >= 1.0, <= 3.13 |
| Moxa | TN-4900 Series | >= 1.0, <= 3.13 |
References
Timeline
- Published
- Jan 3, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Deferred