CVE-2024-9404

HIGH

Moxa VPort 07-3 Series < 1.0 and EDS Series < 3.12 - Denial of Service via moxa_cmd Service

Title source: llm

Description

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

References (3)

Core 3

Core References

Various Sources vendor-advisory

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series

Various Sources vendor-advisory

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches

Various Sources vendor-advisory

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches

Scores

CVSS v3 7.5

EPSS 0.0074

EPSS Percentile 49.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1287

Status published

Products (48)

Moxa/EDS-405A Series 1.0 - 3.14

Moxa/EDS-408A Series 1.0 - 3.12

Moxa/EDS-505A Series 1.0 - 3.11

Moxa/EDS-508A Series 1.0 - 3.11

Moxa/EDS-510A Series 1.0 - 3.12

Moxa/EDS-510E Series 1.0 - 5.5

Moxa/EDS-516A Series 1.0 - 3.11

Moxa/EDS-518A Series 1.0 - 3.11

Moxa/EDS-518E Series 1.0 - 6.3

Moxa/EDS-528E Series 1.0 - 6.3

... and 38 more

Published Dec 04, 2024

Tracked Since Feb 18, 2026