CVE-2024-4640: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker…

PriorityP344high8.2CVSS 3.1

AVNACLPRNUINSUCNILAH

EPSS

0.39%

31.5th percentile

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
moxa	oncell_g3150a-lte_series	1.0 – 1.7.7	—
moxa	oncell_g3470a-lte-eu-t_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte-eu_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte-us-t_firmware	<= 1.7.7	—
moxa	oncell_g3470a-lte-us_firmware	<= 1.7.7	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.