Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:oncell_g3470a-lte-us_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3470A Lte Us Firmware (6e48eb88-316c-5149-afc7-b0b92cab47c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4641 vulnerable 2026-06-08 06:50:18.358153 OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4640 vulnerable 2026-06-08 06:50:18.356944 OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
Published: 2024-06-25T09:19:08.712Z
Updated: 2024-08-01T20:47:41.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4639 vulnerable 2026-06-08 06:50:18.356028 OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T09:15:03.229Z
Updated: 2024-08-01T20:47:41.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4638 vulnerable 2026-06-08 06:50:18.351986 OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T08:49:24.910Z
Updated: 2024-08-01T20:47:41.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11425 vulnerable 2026-06-08 05:10:38.453159 Details available
Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424.
Published: 2019-07-03T15:09:48.000Z
Updated: 2024-08-05T08:10:13.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11424 vulnerable 2026-06-08 05:10:38.448257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.