Moxa Cellular Routers, Secure Routers, and Network Security Appliances OS Command Injection Vulnerability

A critical OS command injection vulnerability has been identified in Moxa's cellular routers, secure routers, and network security appliances. This vulnerability arises from improperly restricted commands, allowing attackers to inject special characters and execute arbitrary code on the device. The issue affects several product series, including the EDR-8010, EDR-G9004, EDR-G9010, EDF-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 series, all running specific firmware versions or earlier.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution, allowing attackers to execute arbitrary code on the affected device.

Remediation

Users are advised to upgrade to the latest firmware versions available for their specific product series. For the OnCell G4302-LTE4 Series, please contact Moxa Technical Support for the security patch.