WID-SEC-W-2024-3154

DeutschShown in its original language — a full translation is planned for a future version.

Moxa Router: Mehrere Schwachstellen ermöglichen Dateimanipulation und Codeausführung

view advisory published 2024-10-13

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Dateien zu manipulieren und beliebigen Code auszuführen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-9139US	—	1.43% (73rd)	—	2024-10-14
The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.
CVE-2024-9137US	—OT elevated	0.50% (43rd)	—	2024-10-14
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, po…

references

External citations — patches, advisories, analysis.

WID-SEC-W-2024-3154 - CSAF Versionself
WID-SEC-2024-3154 - Portal Versionself
Moxa Security Advisory MPSA-240933 vom 2025-02-20external
Moxa Security Advisories vom 2024-10-13external
Moxa Security Advisory MPSA-241156 vom 2025-01-17external
Moxa Security Advisory MPSA-259471 vom 2025-12-15external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan