CVE-2024-9404

Published: Dec 4, 2024

Modified: Aug 27, 2025

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

Vendor	Product	Versions
Moxa	VPort 07-3 Series	affected `1.0`
Moxa	EDS-608 Series	affected `1.0 - <= 3.12`
Moxa	EDS-611 Series	affected `1.0 - <= 3.12`
Moxa	EDS-616 Series	affected `1.0 - <= 3.12`
Moxa	EDS-619 Series	affected `1.0 - <= 3.12`
Moxa	EDS-405A Series	affected `1.0 - <= 3.14`
Moxa	EDS-408A Series	affected `1.0 - <= 3.12`
Moxa	EDS-505A Series	affected `1.0 - <= 3.11`
Moxa	EDS-508A Series	affected `1.0 - <= 3.11`
Moxa	EDS-510A Series	affected `1.0 - <= 3.12`
Moxa	EDS-516A Series	affected `1.0 - <= 3.11`
Moxa	EDS-518A Series	affected `1.0 - <= 3.11`
Moxa	EDS-G509 Series	affected `1.0 - <= 3.10`
Moxa	EDS-P510 Series	affected `1.0 - <= 3.11`
Moxa	EDS-P510A Series	affected `1.0 - <= 3.11`
Moxa	EDS-510E Series	affected `1.0 - <= 5.5`
Moxa	EDS-518E Series	affected `1.0 - <= 6.3`
Moxa	EDS-528E Series	affected `1.0 - <= 6.3`
Moxa	EDS-G508E Series	affected `1.0 - <= 6.4`
Moxa	EDS-G512E Series	affected `1.0 - <= 6.4`
Moxa	EDS-G516E Series	affected `1.0 - <= 6.4`
Moxa	EDS-P506E Series	affected `1.0 - <= 5.8`
Moxa	ICS-G7526A Series	affected `1.0 - <= 5.10`
Moxa	ICS-G7528A Series	affected `1.0 - <= 5.10`
Moxa	ICS-G7748A Series	affected `1.0 - <= 5.9`
Moxa	ICS-G7750A Series	affected `1.0 - <= 5.9`
Moxa	ICS-G7752A Series	affected `1.0 - <= 5.9`
Moxa	ICS-G7826A Series	affected `1.0 - <= 5.10`
Moxa	ICS-G7828A Series	affected `1.0 - <= 5.10`
Moxa	ICS-G7848A Series	affected `1.0 - <= 5.9`
Moxa	ICS-G7850A Series	affected `1.0 - <= 5.9`
Moxa	ICS-G7852A Series	affected `1.0 - <= 5.9`
Moxa	IKS-G6524A Series	affected `1.0 - <= 5.10`
Moxa	IKS-6726A Series	affected `1.0 - <= 5.9`
Moxa	IKS-6728A Series	affected `1.0 - <= 5.9`
Moxa	IKS-G6824A Series	affected `1.0 - <= 5.10`
Moxa	SDS-3006 Series	affected `1.0 - <= 3.0`
Moxa	SDS-3008 Series	affected `1.0 - <= 3.0`
Moxa	SDS-3010 Series	affected `1.0 - <= 3.0`
Moxa	SDS-3016 Series	affected `1.0 - <= 3.0`
Moxa	SDS-G3006 Series	affected `1.0 - <= 3.0`
Moxa	SDS-G3008 Series	affected `1.0 - <= 3.0`
Moxa	SDS-G3010 Series	affected `1.0 - <= 3.0`
Moxa	SDS-G3016 Series	affected `1.0 - <= 3.0`
Moxa	PT-7728 Series	affected `1.0 - <= 3.9`
Moxa	PT-7828 Series	affected `1.0 - <= 4.0`
Moxa	PT-G503 Series	affected `1.0 - <= 5.3`
Moxa	PT-G510 Series	affected `1.0 - <= 6.5`

Weaknesses (CWE)

CWE-1287

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series

vendor-advisory

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches

vendor-advisory

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-9404

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References