Moxa Service Missing Authentication for Critical Function
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Moxa EDR-8010 Series
From 1.0 · through 3.12.1
- Moxa EDR-G9004 Series
From 1.0 · through 3.12.1
- Moxa EDR-G9010 Series
From 1.0 · through 3.12.1
- Moxa EDF-G1002-BP Series
From 1.0 · through 3.12.1
- Moxa NAT-102 Series
From 1.0 · through 1.0.5
- Moxa OnCell G4302-LTE4 Series
From 1.0 · through 3.9
- Moxa TN-4900 Series
From 1.0 · through 3.6
- Moxa EDS-608 Series
From 1.0 · through 3.12
- Moxa EDS-611 Series
From 1.0 · through 3.12
- Moxa EDS-616 Series
From 1.0 · through 3.12
- Moxa EDS-619 Series
From 1.0 · through 3.12
- Moxa EDS-405A Series
From 1.0 · through 3.14
- Moxa EDS-408A Series
From 1.0 · through 3.12
- Moxa EDS-505A Series
From 1.0 · through 3.11
- Moxa EDS-508A Series
From 1.0 · through 3.11
- Moxa EDS-510A Series
From 1.0 · through 3.12
- Moxa EDS-516A Series
From 1.0 · through 3.11
- Moxa EDS-518A Series
From 1.0 · through 3.11
- Moxa EDS-G509 Series
From 1.0 · through 3.10
- Moxa EDS-P510 Series
From 1.0 · through 3.11
- Moxa EDS-P510A Series
From 1.0 · through 3.11
- Moxa EDS-510E Series
From 1.0 · through 5.5
- Moxa EDS-518E Series
From 1.0 · through 6.3
- Moxa EDS-528E Series
From 1.0 · through 6.3
- Moxa EDS-G508E Series
From 1.0 · through 6.4
- Moxa EDS-G512E Series
From 1.0 · through 6.4
- Moxa EDS-G516E Series
From 1.0 · through 6.4
- Moxa EDS-P506E Series
From 1.0 · through 5.8
- Moxa ICS-G7526A Series
From 1.0 · through 5.10
- Moxa ICS-G7528A Series
From 1.0 · through 5.10
- Moxa ICS-G7748A Series
From 1.0 · through 5.9
- Moxa ICS-G7750A Series
From 1.0 · through 5.9
- Moxa ICS-G7752A Series
From 1.0 · through 5.9
- Moxa ICS-G7826A Series
From 1.0 · through 5.10
- Moxa ICS-G7828A Series
From 1.0 · through 5.10
- Moxa ICS-G7848A Series
From 1.0 · through 5.9
- Moxa ICS-G7850A Series
From 1.0 · through 5.9
- Moxa ICS-G7852A Series
From 1.0 · through 5.9
- Moxa IKS-G6524A Series
From 1.0 · through 5.10
- Moxa IKS-6726A Series
From 1.0 · through 5.9
- Moxa IKS-6728A Series
From 1.0 · through 5.9
- Moxa IKS-G6824A Series
From 1.0 · through 5.10
- Moxa SDS-3006 Series
From 1.0 · through 3.0
- Moxa SDS-3008 Series
From 1.0 · through 3.0
- Moxa SDS-3010 Series
From 1.0 · through 3.0
- Moxa SDS-3016 Series
From 1.0 · through 3.0
- Moxa SDS-G3006 Series
From 1.0 · through 3.0
- Moxa SDS-G3008 Series
From 1.0 · through 3.0
- Moxa SDS-G3010 Series
From 1.0 · through 3.0
- Moxa SDS-G3016 Series
From 1.0 · through 3.0
- Moxa PT-7728 Series
From 1.0 · through 3.9
- Moxa PT-7828 Series
From 1.0 · through 4.0
- Moxa PT-G503 Series
From 1.0 · through 5.3
- Moxa PT-G510 Series
From 1.0 · through 6.5
- Moxa PT-G7728 Series
From 1.0 · through 6.4
- Moxa PT-G7828 Series
From 1.0 · through 6.4
- Moxa TN-4500A Series
From 1.0 · through 3.13
- Moxa TN-5500A Series
From 1.0 · through 3.13
- Moxa TN-G4500 Series
From 1.0 · through 5.5
- Moxa TN-G6500 Series
From 1.0 · through 5.5