Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:nat-102:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Nat 102 (8aedb022-e6cb-56a6-bb04-2a22c4b28e67) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9137 |
vulnerable | 2026-06-08 07:00:26.721404 |
Moxa Service Missing Authentication for Critical Function
CRITICAL (9.4)
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
Published: 2024-10-14T08:09:22.689Z
Updated: 2025-09-19T08:08:52.357Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33239 |
vulnerable | 2026-06-08 06:06:22.098759 |
Second Order Command-injection Vulnerability in the Key-generation Function
HIGH (8.8)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:13:25.280Z
Updated: 2024-10-28T06:04:52.923Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33238 |
vulnerable | 2026-06-08 06:06:22.090421 |
Command-injection Vulnerability in Certificate Management
HIGH (7.2)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:04:50.789Z
Updated: 2024-10-28T06:03:40.655Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.