CVE-2024-9404

CWE-12873 documents3 sources
Severity
8.7HIGH
EPSS
0.1%
top 80.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
48
Moxa Eds-405a SeriesMoxa Eds-408a SeriesMoxa Eds-505a Series+45 more
Timeline
PublishedDec 4

Description

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Affected Packages48 packages

▶CVEListV5moxa/eds-608_series1.0 — 3.12
▶CVEListV5moxa/eds-611_series1.0 — 3.12
▶CVEListV5moxa/eds-616_series1.0 — 3.12
▶CVEListV5moxa/eds-619_series1.0 — 3.12
▶CVEListV5moxa/pt-7728_series1.0 — 3.9

🔴Vulnerability Details

2
CVEList
Denial-of-Service Vulnerability↗2024-12-04
▶
GHSA
GHSA-2gj6-9934-w9r6: Moxa’s IP Cameras are affected by a medium-severity vulnerability, CVE-2024-9404, which could lead to a denial-of-service condition or cause a service↗2024-12-04
▶
CVE-2024-9404 (HIGH CVSS 8.7) | This vulnerability could lead to de | cvebase.io