Edr G902 Series
Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:edr-g902_series:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Edr G902 Series (8849685e-1278-5be4-871c-b2c8cff07c8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9138 |
vulnerable | 2026-06-08 07:00:26.773657 |
Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
HIGH (7.2)
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.
Published: 2025-01-03T08:14:31.588Z
Updated: 2025-01-03T14:32:35.370Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34217 |
vulnerable | 2026-06-08 06:06:24.892727 |
Second Order Command-injection Vulnerability in the Certificate-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:48:38.770Z
Updated: 2024-10-02T19:58:00.223Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34216 |
vulnerable | 2026-06-08 06:06:24.891685 |
Second Order Command-injection Vulnerability in the Key-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:41:41.568Z
Updated: 2024-10-08T14:10:45.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34214 |
vulnerable | 2026-06-08 06:06:24.890382 |
Second Order Command-injection Vulnerability in the Certificate-generation Function
HIGH (7.2)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:26:05.428Z
Updated: 2024-10-28T06:07:21.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33239 |
vulnerable | 2026-06-08 06:06:22.098946 |
Second Order Command-injection Vulnerability in the Key-generation Function
HIGH (8.8)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:13:25.280Z
Updated: 2024-10-28T06:04:52.923Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33238 |
vulnerable | 2026-06-08 06:06:22.092811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.