Moxa Tn-4900 Firmware vulnerabilities

6 CVEs affecting Moxa Tn-4900 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9139, published 2024-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-9139, published 2024-10-14. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.
CVE-2023-33239, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient…
CVE-2023-33238, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate…
CVE-2023-34216, published 2023-08-17. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from…
CVE-2023-34217, published 2023-08-17. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient…
CVE-2023-34214, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient…