Sign-up

ID

VAR-201907-1145


CVE

CVE-2018-11424


TITLE

Moxa OnCell G3470A-LTE In the series NULL Pointer dereference vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-015823

DESCRIPTION

There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425. Moxa OnCell G3470A-LTE The series includes NULL A vulnerability related to pointer dereference exists. This vulnerability CVE-2018-11425 Is a different vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. MoxaOnCellG3470A-LTE is a G3470A-LTE series cellular network gateway device from Moxa Corporation of Taiwan, China. An attacker could exploit this vulnerability to corrupt memory

Trust: 2.25

sources: NVD: CVE-2018-11424 // JVNDB: JVNDB-2018-015823 // CNVD: CNVD-2019-23546 // VULHUB: VHN-121282

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

category:['network device']sub_category:LTE device

Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2019-23546

AFFECTED PRODUCTS

vendor:moxamodel:oncell g3470a-lte-us-tscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncell g3470a-lte-euscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncell g3470a-lte-usscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncell g3470a-lte-eu-tscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncellg3470a-lte-euscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncellg3470a-lte-eu-tscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncellg3470a-lte-usscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncellg3470a-lte-us-tscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncell g3470a-lte buildscope:ltversion:1.618021314

Trust: 0.6

sources: CNVD: CNVD-2019-23546 // JVNDB: JVNDB-2018-015823 // NVD: CVE-2018-11424

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-11424
value: HIGH

Trust: 1.0

NVD: CVE-2018-11424
value: HIGH

Trust: 0.8

CNVD: CNVD-2019-23546
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201907-155
value: HIGH

Trust: 0.6

VULHUB: VHN-121282
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-11424
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2019-23546
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-121282
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-11424
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2019-23546 // VULHUB: VHN-121282 // JVNDB: JVNDB-2018-015823 // CNNVD: CNNVD-201907-155 // NVD: CVE-2018-11424

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.1

problemtype:CWE-476

Trust: 0.9

sources: VULHUB: VHN-121282 // JVNDB: JVNDB-2018-015823 // NVD: CVE-2018-11424

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201907-155

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201907-155

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-015823

PATCH
title:OnCell G3470A-LTE Seriesurl:https://www.moxa.com/en/products/industrial-network-infrastructure/cellular-gateways-routers-modems/cellular-gateways/oncell-g3470a-lte-series
Trust: 0.8
title:Patch for MoxaOnCellG3470A-LTE Memory Corruption Vulnerability (CNVD-2019-23546)url:https://www.cnvd.org.cn/patchInfo/show/169927
Trust: 0.6
title:Moxa OnCell G3470A-LTE Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=94356
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2019-23546 // 
            
            
            
            JVNDB: JVNDB-2018-015823 // 
            
            
            
            CNNVD: CNNVD-201907-155

EXTERNAL IDS
db:NVDid:CVE-2018-11424
Trust: 3.2
db:JVNDBid:JVNDB-2018-015823
Trust: 0.8
db:CNNVDid:CNNVD-201907-155
Trust: 0.7
db:CNVDid:CNVD-2019-23546
Trust: 0.6
db:OTHERid:NONE
Trust: 0.1
db:VULHUBid:VHN-121282
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            CNVD: CNVD-2019-23546 // 
            
            
            
            VULHUB: VHN-121282 // 
            
            
            
            JVNDB: JVNDB-2018-015823 // 
            
            
            
            CNNVD: CNNVD-201907-155 // 
            
            
            
            NVD: CVE-2018-11424

REFERENCES
url:https://github.com/klsecservices/advisories/blob/master/kl-moxa-2018-002.md
Trust: 3.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-11424
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11424
Trust: 0.8
url:https://ieeexplore.ieee.org/abstract/document/10769424
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            CNVD: CNVD-2019-23546 // 
            
            
            
            VULHUB: VHN-121282 // 
            
            
            
            JVNDB: JVNDB-2018-015823 // 
            
            
            
            CNNVD: CNNVD-201907-155 // 
            
            
            
            NVD: CVE-2018-11424

SOURCES
db:OTHERid: - 
db:CNVDid:CNVD-2019-23546
db:VULHUBid:VHN-121282
db:JVNDBid:JVNDB-2018-015823
db:CNNVDid:CNNVD-201907-155
db:NVDid:CVE-2018-11424

LAST UPDATE DATE
2025-01-30T21:35:38.092000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2019-23546date:2019-07-22T00:00:00
db:VULHUBid:VHN-121282date:2020-08-24T00:00:00
db:JVNDBid:JVNDB-2018-015823date:2019-07-11T00:00:00
db:CNNVDid:CNNVD-201907-155date:2020-08-25T00:00:00
db:NVDid:CVE-2018-11424date:2024-11-21T03:43:20.400

SOURCES RELEASE DATE
db:CNVDid:CNVD-2019-23546date:2019-07-19T00:00:00
db:VULHUBid:VHN-121282date:2019-07-03T00:00:00
db:JVNDBid:JVNDB-2018-015823date:2019-07-11T00:00:00
db:CNNVDid:CNNVD-201907-155date:2019-07-03T00:00:00
db:NVDid:CVE-2018-11424date:2019-07-03T16:15:10.617