VULNERABILITY INTELLIGENCE

CVE-2024-4640

CVSS score7.1 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-06-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash.

Weakness classification

  • psirt@moxa.com: CWE-120
  • nvd@nist.gov: CWE-120

Primary references