CVE-2024-9138

CVE-2024-9138 is a high-severity vulnerability affecting Moxa’s cellular routers, secure routers, and network security appliances. This flaw involves hard-coded credentials, allowing an authenticated user to escalate privileges and achieve root-level access, leading to full compromise of the system. With a CVSS score of 7.2, the vulnerability is network-exploitable with low attack complexity, posing a significant risk to confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered notable community discussion and media coverage, indicating awareness within the cybersecurity landscape.