CVE-2024-9404 - Denial-of-Service Vulnerability

Back Back to CVE browser

HIGH

Denial-of-Service Vulnerability

Published Dec 4, 2024

8.7

HIGH

CVSS 4.0

EPSS 0.75%

Description

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

Affected products

Vendor Moxa Product EDS-405A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.14
Vendor Moxa Product EDS-408A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.12
Vendor Moxa Product EDS-505A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.11
Vendor Moxa Product EDS-508A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.11
Vendor Moxa Product EDS-510A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.12
Vendor Moxa Product EDS-510E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.5
Vendor Moxa Product EDS-516A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.11
Vendor Moxa Product EDS-518A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.11
Vendor Moxa Product EDS-518E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=6.3
Vendor Moxa Product EDS-528E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=6.3
Vendor Moxa Product EDS-608 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.12
Vendor Moxa Product EDS-611 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.12
Vendor Moxa Product EDS-616 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.12
Vendor Moxa Product EDS-619 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.12
Vendor Moxa Product EDS-G508E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=6.4
Vendor Moxa Product EDS-G509 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.10
Vendor Moxa Product EDS-G512E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=6.4
Vendor Moxa Product EDS-G516E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=6.4
Vendor Moxa Product EDS-P506E Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.8
Vendor Moxa Product EDS-P510 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.11
Vendor Moxa Product EDS-P510A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.11
Vendor Moxa Product ICS-G7526A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.10
Vendor Moxa Product ICS-G7528A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.10
Vendor Moxa Product ICS-G7748A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product ICS-G7750A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product ICS-G7752A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product ICS-G7826A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.10
Vendor Moxa Product ICS-G7828A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.10
Vendor Moxa Product ICS-G7848A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product ICS-G7850A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product ICS-G7852A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product IKS-6726A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product IKS-6728A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.9
Vendor Moxa Product IKS-G6524A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.10
Vendor Moxa Product IKS-G6824A Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.10
Vendor Moxa Product PT-7728 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.9
Vendor Moxa Product PT-7828 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=4.0
Vendor Moxa Product PT-G503 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=5.3
Vendor Moxa Product PT-G510 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=6.5
Vendor Moxa Product SDS-3006 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-3008 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-3010 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-3016 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-G3006 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-G3008 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-G3010 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product SDS-G3016 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <=3.0
Vendor Moxa Product VPort 07-3 Series Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Moxa

EDS-405A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.14

Moxa

EDS-408A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.12

Moxa

EDS-505A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.11

Moxa

EDS-508A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.11

Moxa

EDS-510A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.12

Moxa

EDS-510E Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.5

Moxa

EDS-516A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.11

Moxa

EDS-518A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.11

Moxa

EDS-518E Series

unaffected

Version	Status	Constraints
1.0	affected	<=6.3

Moxa

EDS-528E Series

unaffected

Version	Status	Constraints
1.0	affected	<=6.3

Moxa

EDS-608 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.12

Moxa

EDS-611 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.12

Moxa

EDS-616 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.12

Moxa

EDS-619 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.12

Moxa

EDS-G508E Series

unaffected

Version	Status	Constraints
1.0	affected	<=6.4

Moxa

EDS-G509 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.10

Moxa

EDS-G512E Series

unaffected

Version	Status	Constraints
1.0	affected	<=6.4

Moxa

EDS-G516E Series

unaffected

Version	Status	Constraints
1.0	affected	<=6.4

Moxa

EDS-P506E Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.8

Moxa

EDS-P510 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.11

Moxa

EDS-P510A Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.11

Moxa

ICS-G7526A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.10

Moxa

ICS-G7528A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.10

Moxa

ICS-G7748A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

ICS-G7750A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

ICS-G7752A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

ICS-G7826A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.10

Moxa

ICS-G7828A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.10

Moxa

ICS-G7848A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

ICS-G7850A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

ICS-G7852A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

IKS-6726A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

IKS-6728A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.9

Moxa

IKS-G6524A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.10

Moxa

IKS-G6824A Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.10

Moxa

PT-7728 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.9

Moxa

PT-7828 Series

unaffected

Version	Status	Constraints
1.0	affected	<=4.0

Moxa

PT-G503 Series

unaffected

Version	Status	Constraints
1.0	affected	<=5.3

Moxa

PT-G510 Series

unaffected

Version	Status	Constraints
1.0	affected	<=6.5

Moxa

SDS-3006 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-3008 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-3010 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-3016 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-G3006 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-G3008 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-G3010 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

SDS-G3016 Series

unaffected

Version	Status	Constraints
1.0	affected	<=3.0

Moxa

VPort 07-3 Series

unaffected

Version	Status	Constraints
1.0	affected	-

Remediation

Vendor solution

Please refer to the security advisories:

* CVE-2024-9404: Denial-of-Service Vulnerability Identified in the VPort 07-3 Series https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series

* CVE-2024-9404: Denial-of-Service Vulnerability Identified in Multiple EDS, ICS, IKS, and SDS Switches https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches

* CVE-2024-9404: Denial-of-Service Vulnerability Identified in Multiple PT Switches

Weaknesses (1)

CWE-1287

References (3)

Link	Providers	Tags
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series		vendor-advisory
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches		vendor-advisory
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches		vendor-advisory

Change history (200)

Sep 23, 2026, 06:46 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 04:46 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 12:47 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 10:47 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 08:47 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 06:47 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 04:47 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 02:46 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 23, 2026, 12:47 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 10:46 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 08:47 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 05:25 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 03:25 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 01:25 PM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 11:25 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 09:25 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS score changed from 7.5 to 5.3
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- CVSS score changed from 8.7 to 6.9
Sep 22, 2026, 07:33 AM UTC MITRE
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS score changed from 5.3 to 7.5
- CVSS severity changed from MEDIUM to HIGH
- CVSS vector changed from CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N to CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- CVSS score changed from 6.9 to 8.7
- CVSS severity changed from HIGH to MEDIUM
- CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Moxa

Published Dec 4, 2024

Updated Aug 27, 2025

Reserved Oct 1, 2024

Link CVE-2024-9404

CISA Vulnrichment

Updated Dec 4, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-9404

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-9404