← Database

CVE-2024-4638

HIGH CVSS: 7.1 Published: 2024-06-25 Modified: 2026-06-17

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.

Affected Platforms

Moxa Oncell G3470A-Lte-Eu-T FirmwareMoxa Oncell G3470A-Lte-Eu FirmwareMoxa Oncell G3470A-Lte-Us-T FirmwareMoxa Oncell G3470A-Lte-Eu-TMoxa Oncell G3470A-Lte-Us FirmwareMoxa Oncell G3470A-Lte-UsMoxa Oncell G3470A-Lte-Us-TMoxa Oncell G3470A-Lte-Eu

Weakness Type

CWE-77, CWE-77

References