Riskcovery

CVE-2024-9404

Denial-of-Service Vulnerability

State
Published
Severity
6.9 Medium
Published
Dec 4, 2024
Updated
Aug 27, 2025
Reserved
Oct 1, 2024

Read the record on cve.org

Description

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

Scores

CVSSScoreVectorSource
4.06.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:NMoxa
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LMoxa
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LMoxa
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HMoxa

Weaknesses

  • CWE-1287 Improper Validation of Specified Type of Input

Affected Products

ProductVersions
VPort 07-3 SeriesMoxa
  • 1.0Affected
EDS-608 SeriesMoxa
  • 1.0 through 3.12Affected
EDS-611 SeriesMoxa
  • 1.0 through 3.12Affected
EDS-616 SeriesMoxa
  • 1.0 through 3.12Affected
EDS-619 SeriesMoxa
  • 1.0 through 3.12Affected
EDS-405A SeriesMoxa
  • 1.0 through 3.14Affected
EDS-408A SeriesMoxa
  • 1.0 through 3.12Affected
EDS-505A SeriesMoxa
  • 1.0 through 3.11Affected
EDS-508A SeriesMoxa
  • 1.0 through 3.11Affected
EDS-510A SeriesMoxa
  • 1.0 through 3.12Affected
EDS-516A SeriesMoxa
  • 1.0 through 3.11Affected
EDS-518A SeriesMoxa
  • 1.0 through 3.11Affected
EDS-G509 SeriesMoxa
  • 1.0 through 3.10Affected
EDS-P510 SeriesMoxa
  • 1.0 through 3.11Affected
EDS-P510A SeriesMoxa
  • 1.0 through 3.11Affected
EDS-510E SeriesMoxa
  • 1.0 through 5.5Affected
EDS-518E SeriesMoxa
  • 1.0 through 6.3Affected
EDS-528E SeriesMoxa
  • 1.0 through 6.3Affected
EDS-G508E SeriesMoxa
  • 1.0 through 6.4Affected
EDS-G512E SeriesMoxa
  • 1.0 through 6.4Affected
EDS-G516E SeriesMoxa
  • 1.0 through 6.4Affected
EDS-P506E SeriesMoxa
  • 1.0 through 5.8Affected
ICS-G7526A SeriesMoxa
  • 1.0 through 5.10Affected
ICS-G7528A SeriesMoxa
  • 1.0 through 5.10Affected
ICS-G7748A SeriesMoxa
  • 1.0 through 5.9Affected
ICS-G7750A SeriesMoxa
  • 1.0 through 5.9Affected
ICS-G7752A SeriesMoxa
  • 1.0 through 5.9Affected
ICS-G7826A SeriesMoxa
  • 1.0 through 5.10Affected
ICS-G7828A SeriesMoxa
  • 1.0 through 5.10Affected
ICS-G7848A SeriesMoxa
  • 1.0 through 5.9Affected
ICS-G7850A SeriesMoxa
  • 1.0 through 5.9Affected
ICS-G7852A SeriesMoxa
  • 1.0 through 5.9Affected
IKS-G6524A SeriesMoxa
  • 1.0 through 5.10Affected
IKS-6726A SeriesMoxa
  • 1.0 through 5.9Affected
IKS-6728A SeriesMoxa
  • 1.0 through 5.9Affected
IKS-G6824A SeriesMoxa
  • 1.0 through 5.10Affected
SDS-3006 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-3008 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-3010 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-3016 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-G3006 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-G3008 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-G3010 SeriesMoxa
  • 1.0 through 3.0Affected
SDS-G3016 SeriesMoxa
  • 1.0 through 3.0Affected
PT-7728 SeriesMoxa
  • 1.0 through 3.9Affected
PT-7828 SeriesMoxa
  • 1.0 through 4.0Affected
PT-G503 SeriesMoxa
  • 1.0 through 5.3Affected
PT-G510 SeriesMoxa
  • 1.0 through 6.5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.