Moxa OnCell G3470A-LTE-EU

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:moxa:oncell_g3470a-lte-eu:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3470A Lte Eu (d9932fae-17fd-5d11-9099-92501965cad9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4641 not_vulnerable 2026-06-08 06:50:18.358176 OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4640 not_vulnerable 2026-06-08 06:50:18.356965 OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
Published: 2024-06-25T09:19:08.712Z
Updated: 2024-08-01T20:47:41.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4639 not_vulnerable 2026-06-08 06:50:18.356166 OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T09:15:03.229Z
Updated: 2024-08-01T20:47:41.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4638 not_vulnerable 2026-06-08 06:50:18.351197 OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T08:49:24.910Z
Updated: 2024-08-01T20:47:41.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39279 not_vulnerable 2026-06-08 05:33:49.350512 Details available
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3.
Published: 2021-09-07T05:40:14.000Z
Updated: 2024-08-04T02:06:41.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39278 not_vulnerable 2026-06-08 05:33:49.340121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11425 not_vulnerable 2026-06-08 05:10:38.453445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11424 not_vulnerable 2026-06-08 05:10:38.451367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.