CVE-2024-4641

9.8 criticalEPSS 0.3%

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2024-06-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moxa:oncell_g3470a-lte-eu-t_firmware
moxa:oncell_g3470a-lte-eu_firmware
moxa:oncell_g3470a-lte-us-t_firmware
moxa:oncell_g3470a-lte-us_firmware

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-242550-oncell-g3470a-lte-series-multiple-web-application-vulnerabilities
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-242550-oncell-g3470a-lte-series-multiple-web-application-vulnerabilities

Check your stack JSON