Sign-up

ID

VAR-201907-1146


CVE

CVE-2018-11425


TITLE

Moxa OnCell G3470A-LTE Series buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-015824

DESCRIPTION

Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424. Moxa OnCell G3470A-LTE The series contains a buffer error vulnerability. This vulnerability CVE-2018-11424 Is a different vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. MoxaOnCellG3470A-LTE is a G3470A-LTE series cellular network gateway device from Moxa Corporation of Taiwan, China. A memory corruption vulnerability exists in MoxaOnCellG3470A-LTE1.6Build18021314 and earlier. An attacker could exploit this vulnerability to corrupt memory. There are security vulnerabilities in Moxa OnCell G3470A-LTE 1.6 Build 18021314 and earlier versions

Trust: 2.34

sources: NVD: CVE-2018-11425 // JVNDB: JVNDB-2018-015824 // CNVD: CNVD-2019-23547 // VULHUB: VHN-121283 // VULMON: CVE-2018-11425

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

category:['network device']sub_category:LTE device

Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2019-23547

AFFECTED PRODUCTS

vendor:moxamodel:oncell g3470a-lte-us-tscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncell g3470a-lte-euscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncell g3470a-lte-usscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncell g3470a-lte-eu-tscope:lteversion:1.6

Trust: 1.0

vendor:moxamodel:oncellg3470a-lte-euscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncellg3470a-lte-eu-tscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncellg3470a-lte-usscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncellg3470a-lte-us-tscope:lteversion:1.6 build 18021314

Trust: 0.8

vendor:moxamodel:oncell g3470a-lte buildscope:ltversion:1.618021314

Trust: 0.6

sources: CNVD: CNVD-2019-23547 // JVNDB: JVNDB-2018-015824 // NVD: CVE-2018-11425

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-11425
value: CRITICAL

Trust: 1.0

NVD: CVE-2018-11425
value: CRITICAL

Trust: 0.8

CNVD: CNVD-2019-23547
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201907-152
value: CRITICAL

Trust: 0.6

VULHUB: VHN-121283
value: HIGH

Trust: 0.1

VULMON: CVE-2018-11425
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-11425
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2019-23547
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-121283
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-11425
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2019-23547 // VULHUB: VHN-121283 // VULMON: CVE-2018-11425 // JVNDB: JVNDB-2018-015824 // CNNVD: CNNVD-201907-152 // NVD: CVE-2018-11425

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-121283 // JVNDB: JVNDB-2018-015824 // NVD: CVE-2018-11425

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201907-152

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201907-152

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-015824

PATCH
title:OnCell G3470A-LTE Seriesurl:https://www.moxa.com/en/products/industrial-network-infrastructure/cellular-gateways-routers-modems/cellular-gateways/oncell-g3470a-lte-series
Trust: 0.8
title:Patch for MoxaOnCellG3470A-LTE Memory Corruption Vulnerability (CNVD-2019-23547)url:https://www.cnvd.org.cn/patchInfo/show/169925
Trust: 0.6
title:Moxa OnCell G3470A-LTE Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=94353
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2019-23547 // 
            
            
            
            JVNDB: JVNDB-2018-015824 // 
            
            
            
            CNNVD: CNNVD-201907-152

EXTERNAL IDS
db:NVDid:CVE-2018-11425
Trust: 3.3
db:JVNDBid:JVNDB-2018-015824
Trust: 0.8
db:CNNVDid:CNNVD-201907-152
Trust: 0.7
db:CNVDid:CNVD-2019-23547
Trust: 0.6
db:OTHERid:NONE
Trust: 0.1
db:VULHUBid:VHN-121283
Trust: 0.1
db:VULMONid:CVE-2018-11425
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            CNVD: CNVD-2019-23547 // 
            
            
            
            VULHUB: VHN-121283 // 
            
            
            
            VULMON: CVE-2018-11425 // 
            
            
            
            JVNDB: JVNDB-2018-015824 // 
            
            
            
            CNNVD: CNNVD-201907-152 // 
            
            
            
            NVD: CVE-2018-11425

REFERENCES
url:https://github.com/klsecservices/advisories/blob/master/kl-moxa-2018-003.md
Trust: 3.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-11425
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11425
Trust: 0.8
url:https://ieeexplore.ieee.org/abstract/document/10769424
Trust: 0.1
url:https://cwe.mitre.org/data/definitions/119.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            CNVD: CNVD-2019-23547 // 
            
            
            
            VULHUB: VHN-121283 // 
            
            
            
            VULMON: CVE-2018-11425 // 
            
            
            
            JVNDB: JVNDB-2018-015824 // 
            
            
            
            CNNVD: CNNVD-201907-152 // 
            
            
            
            NVD: CVE-2018-11425

SOURCES
db:OTHERid: - 
db:CNVDid:CNVD-2019-23547
db:VULHUBid:VHN-121283
db:VULMONid:CVE-2018-11425
db:JVNDBid:JVNDB-2018-015824
db:CNNVDid:CNNVD-201907-152
db:NVDid:CVE-2018-11425

LAST UPDATE DATE
2025-01-30T21:55:57.062000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2019-23547date:2019-07-22T00:00:00
db:VULHUBid:VHN-121283date:2019-07-10T00:00:00
db:VULMONid:CVE-2018-11425date:2019-07-10T00:00:00
db:JVNDBid:JVNDB-2018-015824date:2019-07-11T00:00:00
db:CNNVDid:CNNVD-201907-152date:2019-07-11T00:00:00
db:NVDid:CVE-2018-11425date:2024-11-21T03:43:20.547

SOURCES RELEASE DATE
db:CNVDid:CNVD-2019-23547date:2019-07-22T00:00:00
db:VULHUBid:VHN-121283date:2019-07-03T00:00:00
db:VULMONid:CVE-2018-11425date:2019-07-03T00:00:00
db:JVNDBid:JVNDB-2018-015824date:2019-07-11T00:00:00
db:CNNVDid:CNNVD-201907-152date:2019-07-03T00:00:00
db:NVDid:CVE-2018-11425date:2019-07-03T16:15:10.693