Moxa Oncell G3150A-Lte Series vulnerabilities

CVE-2024-4641 [MEDIUM] CWE-134 CVE-2024-4641: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due t OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.

CVE-2024-4640 [HIGH] CWE-120 CVE-2024-4640: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due t OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.

CVE-2024-4639 [HIGH] CWE-77 CVE-2024-4639: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due t OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.

CVE-2023-6094 [MEDIUM] CWE-319 CVE-2023-6094: A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. Th A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather

CVE-2023-6093 [MEDIUM] CWE-1021 CVE-2023-6093: A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the app