Moxa Oncell G3470a-lte-eu Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Moxa Oncell G3470a-lte-eu Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2018-11425 — CVSS 9.8 (critical): Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability…
• CVE-2021-39279 — CVSS 8.8 (high): Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T…
• CVE-2018-11424 — CVSS 7.5 (high): There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different…
• CVE-2024-4638 — CVSS 7.1 (high): OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the…
• CVE-2024-4639 — CVSS 7.1 (high): OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec…
• CVE-2024-4640 — CVSS 7.1 (high): OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer…
• CVE-2024-4641 — CVSS 6.3 (medium): OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an…
• CVE-2021-39278 — CVSS 6.1 (medium): Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell…