CVE-2024-9138: Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Published Jan 3, 2025

Updated

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.

Affected Software

3 affected components

MOXA cellular routers

MOXA secure routers

MOXA network security appliances

Remediation

Information

Moxa has developed appropriate solutions to address vulnerability. The solutions for the affected products are listed below. * EDR-810 Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/secure-routers/secure-routers/edr-810-series#resources or later * EDR-8010 Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/secure-routers/secure-routers/edr-8010-series#resources or later * EDR-G902 Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/secure-routers/secure-routers/edr-g902-series#resources or later * EDR-G903 Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/secure-routers/secure-routers/edr-g903-series#resources or later * EDR-G9004 Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/secure-routers/secure-routers/edr-g9004-series#resources or later * EDR-G9010 Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/secure-routers/secure-routers/edr-g9010-series#resources or later * EDF-G1002-BP Series: Upgrade to the firmware version 3.14 https://www.moxa.com/en/products/industrial-network-infrastructure/network-security-appliance/edf-g1002-bp-series#resources or later * NAT-102 Series: An official patch or firmware update is not currently available for this product. Please refer to the Mitigations section below for recommended measures to address the vulnerability. * OnCell G4302-LTE4 Series: Please contact Moxa Technical Support https://www.moxa.com/support/support/technical-support for the security patch * TN-4900 Series: Please contact Moxa Technical Support https://www.moxa.com/support/support/technical-support for the security patch

Event History

Jan 3, 2025

CVE Published

via MITRE·08:14 AM

Data Sourced

via MITRE·08:14 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeakness

Jan 6, 2025

News Published

via BleepingComputer·05:15 PM

News Published

via BleepingComputer·05:17 PM

Frequently Asked Questions

What is the severity of CVE-2024-9138?

CVE-2024-9138 has been classified as a high-severity vulnerability.

How does CVE-2024-9138 affect Moxa devices?

CVE-2024-9138 allows an authenticated user to exploit hard-coded credentials to escalate privileges and gain root access.

What types of devices are impacted by CVE-2024-9138?

CVE-2024-9138 affects Moxa cellular routers, secure routers, and network security appliances.

How can I mitigate CVE-2024-9138?

To mitigate CVE-2024-9138, users should update their devices with the latest firmware that addresses this vulnerability.

What are the potential risks of CVE-2024-9138?

The potential risks of CVE-2024-9138 include unauthorized access to sensitive systems and data compromise.