CVE-2024-9138

Summary

CVE-2024-9138 is a newly disclosed vulnerability that puts Moxa's cellular routers, secure routers, and network security appliances at risk. The issue revolves around hard-coded credentials, which can be exploited by authenticated users to escalate their privileges and ultimately gain root-level access to the affected systems. This vulnerability poses a significant security risk, as unauthorized users with this level of access can make substantial changes to the system configuration and potentially cause serious harm. Organizations using Moxa's impacted products are urged to update their firmware and implement strong access control measures to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.