Approved changes feed: RSS · Atom

cpe:2.3:h:moxa:oncell_g3470a-lte-us:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3470A Lte Us (e1fb7aba-ec5e-594c-97bf-3d6b469ea577)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4641 not_vulnerable 2026-06-08 06:50:18.358214 OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4641 vulnerable 2026-06-08 06:50:18.357862 OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4640 not_vulnerable 2026-06-08 06:50:18.357128 OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
Published: 2024-06-25T09:19:08.712Z
Updated: 2024-08-01T20:47:41.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4639 not_vulnerable 2026-06-08 06:50:18.356206 OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T09:15:03.229Z
Updated: 2024-08-01T20:47:41.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4638 not_vulnerable 2026-06-08 06:50:18.352160 OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T08:49:24.910Z
Updated: 2024-08-01T20:47:41.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4638 vulnerable 2026-06-08 06:50:18.344637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11425 not_vulnerable 2026-06-08 05:10:38.453186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11424 not_vulnerable 2026-06-08 05:10:38.449192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.