Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:tn-4900_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductTn 4900 Firmware (6a63deea-c152-58d6-bf16-2e41ce5a5345)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9139 vulnerable 2026-06-08 07:00:26.781429 OS Command Injection in Restricted Command
HIGH (7.2)
The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.
Published: 2024-10-14T08:20:52.200Z
Updated: 2024-11-06T20:47:06.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34217 vulnerable 2026-06-08 06:06:24.893012 Second Order Command-injection Vulnerability in the Certificate-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:48:38.770Z
Updated: 2024-10-02T19:58:00.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34216 vulnerable 2026-06-08 06:06:24.892042 Second Order Command-injection Vulnerability in the Key-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:41:41.568Z
Updated: 2024-10-08T14:10:45.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34214 vulnerable 2026-06-08 06:06:24.890458 Second Order Command-injection Vulnerability in the Certificate-generation Function
HIGH (7.2)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:26:05.428Z
Updated: 2024-10-28T06:07:21.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33239 vulnerable 2026-06-08 06:06:22.099144 Second Order Command-injection Vulnerability in the Key-generation Function
HIGH (8.8)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:13:25.280Z
Updated: 2024-10-28T06:04:52.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33238 vulnerable 2026-06-08 06:06:22.095968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.