CVE-2024-9139: Moxa Edf-g1002-Bp Firmware

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.

Affected products

• Moxa Edf-g1002-Bp Firmware: from 1.0, up to and including 3.12.1
• Moxa Edf-g1002-Bp Series: from 1.0, up to and including 3.12.1
• Moxa Edr-8010 Firmware: from 1.0, up to and including 3.12.1
• Moxa Edr-8010 Series: from 1.0, up to and including 3.12.1
• Moxa Edr-810 Firmware: from 1.0, up to and including 5.12.33
• Moxa Edr-810 Series: from 1.0, up to and including 5.12.33
• Moxa Edr-g9004 Firmware: from 1.0, up to and including 3.12.1
• Moxa Edr-g9004 Series: from 1.0, up to and including 3.12.1
• Moxa Edr-g9010 Firmware: from 1.0, up to and including 3.12.1
• Moxa Edr-g9010 Series: from 1.0, up to and including 3.12.1
• Moxa Nat-102 Firmware: from 1.0, up to and including 1.0.5
• Moxa Nat-102 Series: from 1.0, up to and including 1.0.5
• Moxa Oncell g4302-LTE4 Firmware: from 1.0, up to and including 3.9
• Moxa Oncell g4302-LTE4 Series: from 1.0, up to and including 3.9
• Moxa Tn-4900 Firmware: from 1.0, up to and including 3.6
• Moxa Tn-4900 Series: from 1.0, up to and including 3.6

Published 2024-10-14. Last modified 2026-06-17.