CVE-2024-4638: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload…

PriorityP354high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.44%

35.6th percentile

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
moxa	oncell_g3470a-lte-eu-t_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte-eu_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte-us-t_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte-us_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte_series	1.0 – 1.7.7	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.