CVE-2024-9140

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Jan 3, 2025
Source updated: Jan 3, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significant risk to the system’s security and functionality.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

EDR-8010 Series

Vendor: Moxa
Product: EDR-8010 Series
Platforms: Unknown
Default status: unaffected

EDR-8010 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	3.13.1	None listed

EDR-G9004 Series

Vendor: Moxa
Product: EDR-G9004 Series
Platforms: Unknown
Default status: unaffected

EDR-G9004 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	3.13.1	None listed

EDR-G9010 Series

Vendor: Moxa
Product: EDR-G9010 Series
Platforms: Unknown
Default status: unaffected

EDR-G9010 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	3.13.1	None listed

EDF-G1002-BP Series

Vendor: Moxa
Product: EDF-G1002-BP Series
Platforms: Unknown
Default status: unaffected

EDF-G1002-BP Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	3.13.1	None listed

NAT-102 Series

Vendor: Moxa
Product: NAT-102 Series
Platforms: Unknown
Default status: unaffected

NAT-102 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	1.0.5	None listed

OnCell G4302-LTE4 Series

Vendor: Moxa
Product: OnCell G4302-LTE4 Series
Platforms: Unknown
Default status: unaffected

OnCell G4302-LTE4 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	3.13	None listed

TN-4900 Series

Vendor: Moxa
Product: TN-4900 Series
Platforms: Unknown
Default status: unaffected

TN-4900 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	custom	Unavailable	3.13	None listed