FlagThis

Moxa has identified two critical security vulnerabilities in its cellular routers, secure routers, and network security appliances. The first vulnerability, CVE-2024-9138, involves hard-coded credentials that could allow authenticated users to escalate their privileges to root-level access, enabling system compromise, unauthorized modifications, data exposure, and service disruptions. The second flaw is CVE-2024-9140. Both have a CVSS score of 9.8. Moxa is urging users to apply immediate updates to mitigate these risks.

ImgSrc: industrialcyber.co

References:

• securityonline.info - CVE-2024-9138 and CVE-2024-9140 (CVSS 9.8): Moxa Calls for Immediate Security Action - 1d
• Industrial Cyber - Moxa finds privilege escalation, OS command injection flaws in cellular routers, network security appliances - 1d
• @BleepingComputer - Industrial networking and communications provider Moxa is warning of a high-severity and a critical vulnerability that impact various models of its cellular routers, secure routers, and network securi - 1d
• Security Archives - Security Affairs - Moxa router flaws pose serious risks to industrial environmets - 1d
• Vulnerability Archives ? Cybersecurity News - CVE-2024-9138 and CVE-2024-9140 (CVSS 9.8): Moxa Calls for Immediate Security Action - 1d
• The Hacker News - Moxa Alerts Users to High-Severity Vulnerabilities in Cellular and Secure Routers - 1d
• CISO2CISO.COM & CYBER SECURITY GROUP - Moxa Urges Immediate Updates for Security Vulnerabilities – Source: www.infosecurity-magazine.com - 1d
• ciso2ciso.com - Moxa Urges Immediate Updates for Security Vulnerabilities – Source: www.infosecurity-magazine.com - 21h
• Security Risk Advisors - Moxa Devices Impacted by Privilege Escalation and OS Command Injection Vulnerabilities - 21h
• www.bleepingcomputer.com - Vulnerable Moxa devices expose industrial networks to attacks - 17h

Classification:

• HashTags: Moxa Vulnerability RouterSecurity
• Company: Moxa
• Target: Moxa Router Users
• Product: Moxa Routers
• Feature: Hard-coded Credentials
• Type: Vulnerability
• Severity: Major