Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EDR-810 Series
Vendor
Moxa
Product
EDR-810 Series
Platforms
Unknown
Default status
unaffected
EDR-810 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
5.12.37
None listed
EDR-8010 Series
Vendor
Moxa
Product
EDR-8010 Series
Platforms
Unknown
Default status
unaffected
EDR-8010 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.13.1
None listed
EDR-G902 Series
Vendor
Moxa
Product
EDR-G902 Series
Platforms
Unknown
Default status
unaffected
EDR-G902 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
5.7.25
None listed
EDR-G903 Series
Vendor
Moxa
Product
EDR-G903 Series
Platforms
Unknown
Default status
unaffected
EDR-G903 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
5.7.25
None listed
EDR-G9004 Series
Vendor
Moxa
Product
EDR-G9004 Series
Platforms
Unknown
Default status
unaffected
EDR-G9004 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.13.1
None listed
EDR-G9010 Series
Vendor
Moxa
Product
EDR-G9010 Series
Platforms
Unknown
Default status
unaffected
EDR-G9010 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.13.1
None listed
EDF-G1002-BP Series
Vendor
Moxa
Product
EDF-G1002-BP Series
Platforms
Unknown
Default status
unaffected
EDF-G1002-BP Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.13.1
None listed
NAT-102 Series
Vendor
Moxa
Product
NAT-102 Series
Platforms
Unknown
Default status
unaffected
NAT-102 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
1.0.5
None listed
OnCell G4302-LTE4 Series
Vendor
Moxa
Product
OnCell G4302-LTE4 Series
Platforms
Unknown
Default status
unaffected
OnCell G4302-LTE4 Series · Scoped product and version facts