GCVE - cpe:2.3:a:moxa:sds-3016_series:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:moxa:sds-3016_series:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Sds 3016 Series (`ce0eddf8-45bf-5245-93eb-70049786571a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-9404`	vulnerable	2026-06-08 07:00:27.268777	Denial-of-Service Vulnerability MEDIUM (5.3) This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems. Published: 2024-12-04T03:54:32.073Z Updated: 2025-08-27T21:36:46.745Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-9137`	vulnerable	2026-06-08 07:00:26.755525	Moxa Service Missing Authentication for Critical Function CRITICAL (9.4) The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise. Published: 2024-10-14T08:09:22.689Z Updated: 2025-09-19T08:08:52.357Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7695`	vulnerable	2026-06-08 06:58:23.059713	Out-of-bounds Write Vulnerability HIGH (7.5) Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack. Published: 2025-01-29T07:42:54.913Z Updated: 2025-02-22T14:48:56.211Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.