Description
The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.
Metrics
CVSS 3.1 7.2/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | EDR-8010 Series | >= 1.0, <= 3.12.1 |
| Moxa | EDR-G9004 Series | >= 1.0, <= 3.12.1 |
| Moxa | EDR-G9010 Series | >= 1.0, <= 3.12.1 |
| Moxa | EDF-G1002-BP Series | >= 1.0, <= 3.12.1 |
| Moxa | NAT-102 Series | >= 1.0, <= 1.0.5 |
| Moxa | OnCell G4302-LTE4 Series | >= 1.0, <= 3.9 |
| Moxa | TN-4900 Series | >= 1.0, <= 3.6 |
| Moxa | EDR-810 Series | >= 1.0, <= 5.12.33 |
| moxa | edr-8010_firmware | >= 1.0, <= 3.12.1 |
| moxa | edr-g9004_firmware | >= 1.0, <= 3.12.1 |
| moxa | edr-g9010_firmware | >= 1.0, <= 3.12.1 |
| moxa | edf-g1002-bp_firmware | >= 1.0, <= 3.12.1 |
| moxa | nat-102_firmware | >= 1.0, <= 1.0.5 |
| moxa | oncell_g4302-lte4_firmware | >= 1.0, <= 3.9 |
| moxa | tn-4900_firmware | >= 1.0, <= 3.6 |
| moxa | edr-810_firmware | >= 1.0, <= 5.12.33 |
References
Timeline
- Published
- Oct 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Deferred