CVE-2024-9138
published 2025-01-03CVE-2024-9138: Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability…
PriorityP345high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.12%
62.4th percentile
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | edf-g1002-bp_series | 1.0 – 3.13.1 | — |
| moxa | edr-8010_series | 1.0 – 3.13.1 | — |
| moxa | edr-810_series | 1.0 – 5.12.37 | — |
| moxa | edr-g9004_series | 1.0 – 3.13.1 | — |
| moxa | edr-g9010_series | 1.0 – 3.13.1 | — |
| moxa | edr-g902_series | 1.0 – 5.7.25 | — |
| moxa | edr-g903_series | 1.0 – 5.7.25 | — |
| moxa | nat-102_series | 1.0 – 1.0.5 | — |
| moxa | oncell_g4302-lte4_series | 1.0 – 3.13 | — |
| moxa | tn-4900_series | 1.0 – 3.13 | — |
| msrc | microsoft_sharepoint_enterprise_server_2016 | — | — |
| msrc | microsoft_sharepoint_server_2019 | — | — |
| msrc | microsoft_sharepoint_server_subscription_edition | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.08.6HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wv93-f9g8-qg2r: Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138
ghsa_unreviewed·2025-01-03·CVSS 8.6
CVE-2024-9138 [HIGH] CWE-656 GHSA-wv93-f9g8-qg2r: Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.
Microsoft
Microsoft SharePoint Elevation of Privilege Vulnerability
vendor_msrc·2024-10-08·CVSS 7.8
CVE-2024-43503 [HIGH] CWE-284 Microsoft SharePoint Elevation of Privilege Vulnerability
Microsoft SharePoint Elevation of Privilege Vulnerability
FAQ: What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
Microsoft Office SharePoint: Microsoft Office SharePoint
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely
Reference: https://www.microsoft.com/download/details.aspx?familyid=65e0aae8-9138-421d-9aae-d104e6d6cd15
Reference: https://support.microsoft.com/help/5002645
Reference: https://www.microsoft.com/download/details.aspx?familyid=890ea372-4b61-43aa-a3fb-aea4e0d59304
Reference: https://support.microsoft.com/h
No detection rules found.
No public exploits indexed.
2025-01-03
Published