Back to feed
EUVD-2024-44242 · Published Jun 25, 2024
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Technologies
Moxa Oncell G3470A-Lte-EuMoxa Oncell G3470A-Lte-Eu-T FirmwareMoxa Oncell G3470A-Lte-Eu FirmwareMoxa Oncell G3470A-Lte-Us FirmwareMoxa Oncell G3470A-Lte-UsMoxa Oncell G3470A-Lte-Eu-TMoxa Oncell G3470A-Lte-Us-TMoxa Oncell G3470A-Lte-Us-T Firmware
Weaknesses
CWE-77
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
