Moxa OnCell G3470A-LTE-EU-T

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:moxa:oncell_g3470a-lte-eu-t:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3470A Lte Eu T (6c017fac-bb5d-58f7-a94d-8d2b86081392)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4641 not_vulnerable 2026-06-08 06:50:18.358197 OnCell G3470A-LTE Series: Authenticated Format String Errors
MEDIUM (6.3)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.
Published: 2024-06-25T09:23:30.502Z
Updated: 2024-08-01T20:47:41.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4640 not_vulnerable 2026-06-08 06:50:18.357107 OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.
Published: 2024-06-25T09:19:08.712Z
Updated: 2024-08-01T20:47:41.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4639 not_vulnerable 2026-06-08 06:50:18.356185 OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T09:15:03.229Z
Updated: 2024-08-01T20:47:41.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4638 not_vulnerable 2026-06-08 06:50:18.348573 OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
HIGH (7.1)
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
Published: 2024-06-25T08:49:24.910Z
Updated: 2024-08-01T20:47:41.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39279 not_vulnerable 2026-06-08 05:33:49.350760 Details available
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3.
Published: 2021-09-07T05:40:14.000Z
Updated: 2024-08-04T02:06:41.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39278 not_vulnerable 2026-06-08 05:33:49.341340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11425 not_vulnerable 2026-06-08 05:10:38.453478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11424 not_vulnerable 2026-06-08 05:10:38.452610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.