CVE-2024-4638
—CVSS 3.1
8.8 high
EPSS
<1%p37
Published
()
Modified
Description
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.
- Vendors
- moxa
- Products
- oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware, oncell g3470a-lte-us firmware, oncell g3470a-lte-us-t firmware
- Weakness
- CWE-77
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.