High severity7.1NVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2024-4638

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moxa/OnCell G3470A-LTE Seriesllm-fuzzy2 versions
<=v1.7.7+ 1 more
- (no CPE)range: <=v1.7.7
- (no CPE)range: 1.0
Moxa/Oncell G3470a Lte Eu T Firmware
cpe:2.3:o:moxa:oncell_g3470a-lte-eu-t_firmware:*:*:*:*:*:*:*:*
Range: <=1.7.7
Moxa/Oncell G3470a Lte Eu Firmware
cpe:2.3:o:moxa:oncell_g3470a-lte-eu_firmware:*:*:*:*:*:*:*:*
Range: <=1.7.7
Moxa/Oncell G3470a Lte Us Firmware
cpe:2.3:o:moxa:oncell_g3470a-lte-us_firmware:*:*:*:*:*:*:*:*
Range: <=1.7.7
Moxa/Oncell G3470a Lte Us T Firmware
cpe:2.3:o:moxa:oncell_g3470a-lte-us-t_firmware:*:*:*:*:*:*:*:*
Range: <=1.7.7

Patches

Vulnerability mechanics

References

www.moxa.com/en/support/product-support/security-advisory/mpsa-242550-oncell-g3470a-lte-series-multiple-web-application-vulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000