CVE-2024-0387

CVSS V2 None CVSS V3 None

Description

The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.

Overview

CVE ID
CVE-2024-0387

Assigner
Moxa

Vulnerability Status
PUBLISHED

Published Version
2024-02-26T13:26:56.551Z

Last Modified Date
2024-06-04T17:58:21.711Z

Weakness Enumerations

CWE	URL
CWE-441	http://cwe.mitre.org/data/definitions/441.html

References

Reference URL	Reference Tags
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-237129-eds-4000-g4000-series-ip-forwarding-vulnerability?viewmode=0	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-0387
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0387

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 10:40:18				Added to TrackCVE