Vulnerability · Published Feb 26, 2024 · Assigned by Moxa
CVE-2024-0387EDS-4000/G4000 Series IP Forwarding Vulnerability
Medium 6.5
In plain English
A medium-severity security flaw in EDS-4008 Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 54.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | EDS-4008 Series | 1.0 – through 3.2 |
| Moxa | EDS-4009 Series | 1.0 – through 3.2 |
| Moxa | EDS-4012 Series | 1.0 – through 3.2 |
| Moxa | EDS-4014 Series | 1.0 – through 3.2 |
| Moxa | EDS-G4008 Series | 1.0 – through 3.2 |
| Moxa | EDS-G4012 Series | 1.0 – through 3.2 |
| Moxa | EDS-G4014 Series | 1.0 – through 3.2 |
Weakness: CWE-1188 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L