CVE-2024-0387
Medium
Description
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.
SeverityMedium
CVSS6.5
Exploit probability—
ProductMoxa Eds-4008 Firmware
PublishedFeb 26, 2024
First seenFeb 26, 2024
Weakness typeCWE-1188CWE-1188
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa eds-4008_firmware | v ≤ 3.2 | — |
| moxa eds-4009_firmware | v ≤ 3.2 | — |
| moxa eds-4012_firmware | v ≤ 3.2 | — |
| moxa eds-4014_firmware | v ≤ 3.2 | — |
| moxa eds-g4008_firmware | v ≤ 3.2 | — |
| moxa eds-g4012_firmware | v ≤ 3.2 | — |
| moxa eds-g4014_firmware | v ≤ 3.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.