Approved changes feed: RSS · Atom

cpe:2.3:a:moxa:oncell_g3150a-lte_series:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3150A Lte Series (f7a494d1-6713-5964-bad1-27a7fb8f5d20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4641 vulnerable 2026-06-08 06:50:18.357977 OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4640 vulnerable 2026-06-08 06:50:18.356834 OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
Published: 2024-06-25T09:19:08.712Z
Updated: 2024-08-01T20:47:41.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4639 vulnerable 2026-06-08 06:50:18.355668 OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T09:15:03.229Z
Updated: 2024-08-01T20:47:41.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6094 vulnerable 2026-06-08 06:19:45.549430 OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials
MEDIUM (5.3)
A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target.
Published: 2023-12-31T09:57:27.448Z
Updated: 2024-08-26T20:21:09.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6093 vulnerable 2026-06-08 06:19:45.547100 OnCell G3150A-LTE Series: Clickjacking Vulnerability
MEDIUM (5.3)
A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the application.
Published: 2023-12-31T09:53:04.790Z
Updated: 2024-08-02T08:21:17.143Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.