CVE-2024-9138: moxa edf-g1002-bp series Reliance on Security Through Obscurity

Vulnerability summary

CVE-2024-9138 is a high (CVSS 8.6) Reliance on Security Through Obscurity vulnerability in moxa edf-g1002-bp series. EPSS estimates a 1.15% chance of exploitation in the next 30 days, higher than 66.4% of scored vulnerabilities.

Timeline

1. 03-01-2025
   PublishedVulnerability first disclosed.
2. 03-01-2025
   Last modifiedVulnerability information updated.

Description

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.

• CWE-656Reliance on Security Through ObscurityThe product uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.