Medium severity6.5NVD Advisory· Published Feb 26, 2024· Updated Jun 17, 2026

CVE-2024-0387

Description

The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moxa/EDS-4000/G4000 Seriescpe-rescue4 versions
1.0+ 3 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0
- (no CPE)range: 1.0
- (no CPE)range: <3.2
Moxa/Eds 4008 Firmware
cpe:2.3:o:moxa:eds-4008_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/Eds 4009 Firmware
cpe:2.3:o:moxa:eds-4009_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/Eds 4012 Firmware
cpe:2.3:o:moxa:eds-4012_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/Eds 4014 Firmware
cpe:2.3:o:moxa:eds-4014_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/Eds G4008 Firmware
cpe:2.3:o:moxa:eds-g4008_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/Eds G4012 Firmware
cpe:2.3:o:moxa:eds-g4012_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/Eds G4014 Firmware
cpe:2.3:o:moxa:eds-g4014_firmware:*:*:*:*:*:*:*:*
Range: <=3.2
Moxa/EDS-405A/408A Seriescpe-rescue4 versions
1.0+ 3 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0
- (no CPE)range: 1.0
- (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

www.moxa.com/en/support/product-support/security-advisory/mpsa-237129-eds-4000-g4000-series-ip-forwarding-vulnerabilitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000