CVE-2018-11425
published 2019-07-03CVE-2018-11425: Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424.
PriorityP345critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.54%
72.0th percentile
Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | oncell_g3470a-lte-eu-t_firmware | <= 1.6 | — |
| moxa | oncell_g3470a-lte-eu_firmware | <= 1.6 | — |
| moxa | oncell_g3470a-lte-us-t_firmware | <= 1.6 | — |
| moxa | oncell_g3470a-lte-us_firmware | <= 1.6 | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fg62-fmm9-g7xf: Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1
ghsa_unreviewed·2022-05-24·CVSS 7.5
CVE-2018-11425 [HIGH] CWE-119 GHSA-fg62-fmm9-g7xf: Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1
Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424.
GHSA
GHSA-9q52-rmx8-c9gh: There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1
ghsa_unreviewed·2022-05-24·CVSS 9.8
CVE-2018-11424 [CRITICAL] GHSA-9q52-rmx8-c9gh: There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-07-03
Published