Pt G7728 Series
Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:pt-g7728_series:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Pt G7728 Series (8d0c73c9-292b-5f59-a871-1b4ce4bf1fff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9137 |
vulnerable | 2026-06-08 07:00:26.766962 |
Moxa Service Missing Authentication for Critical Function
CRITICAL (9.4)
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
Published: 2024-10-14T08:09:22.689Z
Updated: 2025-09-19T08:08:52.357Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7695 |
vulnerable | 2026-06-08 06:58:23.033711 |
Out-of-bounds Write Vulnerability
HIGH (7.5)
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
Published: 2025-01-29T07:42:54.913Z
Updated: 2025-02-22T14:48:56.211Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12297 |
vulnerable | 2026-06-08 06:23:51.677137 |
Frontend Authorization Logic Disclosure Vulnerability
Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
Published: 2025-01-15T10:00:46.524Z
Updated: 2025-03-06T08:27:52.297Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.