CVE-2024-0387
EDS-4000/G4000 Series IP Forwarding Vulnerability
- State
- Published
- Severity
- 6.5 Medium
- Published
- Feb 26, 2024
- Updated
- Oct 28, 2024
- Reserved
- Jan 10, 2024
Description
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L | Moxa |
Weaknesses
- CWE-1188 Insecure Default Initialization of Resource
Affected Products
| Product | Versions |
|---|---|
EDS-4008 SeriesMoxa |
|
EDS-4009 SeriesMoxa |
|
EDS-4012 SeriesMoxa |
|
EDS-4014 SeriesMoxa |
|
EDS-G4008 SeriesMoxa |
|
EDS-G4012 SeriesMoxa |
|
EDS-G4014 SeriesMoxa |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.