Moxa’s cellular routers, secure routers, and network security appliances are affected by two critical vulnerabilities that could lead to unauthorized access and system compromise. The first vulnerability, CVE-2024-9137, allows attackers to manipulate device configurations without authentication. The second vulnerability, CVE-2024-9139, permits OS command injection through improperly restricted commands, potentially enabling attackers to execute arbitrary codes. These vulnerabilities pose a significant security risk, and it is highly recommended to take immediate action in order to prevent potential exploitation.

The identified vulnerability types and potential impacts are listed below:

Vulnerability Scoring Details 

The Products Affected by CVE-2024-9137:

The affected products and firmware versions are listed below.

The Products Affected by CVE-2024-9139:

The affected products and firmware versions are listed below.

Solutions:

Moxa has developed appropriate solutions to address vulnerability. The solutions for the affected products are listed below.

Mitigations:

• Minimize network exposure to ensure the device is not accessible from the Internet.
• Limit web access to trusted IP addresses and networks by using firewall rules or TCP wrappers.
• Implement IDS or Intrusion Prevention System (IPS) to detect and prevent exploitation attempts. These systems can provide an additional layer of defense by monitoring network traffic for signs of attacks.

Acknowledgment

We would like to express our appreciation to Lars Haulin for reporting the vulnerability, collaborating with us to enhance the security of our products, and helping us deliver better service to our customers.

Revision History: