Oncell G3150A Lte Series
Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:oncell_g3150a-lte_series:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Oncell G3150A Lte Series (f7a494d1-6713-5964-bad1-27a7fb8f5d20) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111460 |
vulnerable | 2026-11-03 10:16:11.507457 |
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Published: 2026-10-27T07:13:51.550Z
Updated: 2026-11-04T15:00:37.980Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111461 |
vulnerable | 2026-11-03 10:16:11.040966 |
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.
Published: 2026-10-27T07:17:01.566Z
Updated: 2026-11-04T15:00:19.372Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4641 |
vulnerable | 2026-06-08 06:50:18.357977 |
OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4640 |
vulnerable | 2026-06-08 06:50:18.356834 |
OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
Published: 2024-06-25T09:19:08.712Z
Updated: 2024-08-01T20:47:41.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4639 |
vulnerable | 2026-06-08 06:50:18.355668 |
OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T09:15:03.229Z
Updated: 2024-08-01T20:47:41.194Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6094 |
vulnerable | 2026-06-08 06:19:45.549430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6093 |
vulnerable | 2026-06-08 06:19:45.547100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.