# CVE-2024-9404

## Summary

- **CVE ID:** CVE-2024-9404
- **Severity:** MEDIUM
- **CVSS Score:** 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-1287
- **Published:** Dec 4, 2024
- **Last Modified:** Mar 13, 2026

## Description

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing attackers to shut down affected systems.

## Affected Products

- Moxa — VPort 07-3 Series (1.0)
- Moxa — EDS-608 Series (1.0)
- Moxa — EDS-611 Series (1.0)
- Moxa — EDS-616 Series (1.0)
- Moxa — EDS-619 Series (1.0)
- Moxa — EDS-405A Series (1.0)
- Moxa — EDS-408A Series (1.0)
- Moxa — EDS-505A Series (1.0)
- Moxa — EDS-508A Series (1.0)
- Moxa — EDS-510A Series (1.0)
- Moxa — EDS-516A Series (1.0)
- Moxa — EDS-518A Series (1.0)
- Moxa — EDS-G509 Series (1.0)
- Moxa — EDS-P510 Series (1.0)
- Moxa — EDS-P510A Series (1.0)
- Moxa — EDS-510E Series (1.0)
- Moxa — EDS-518E Series (1.0)
- Moxa — EDS-528E Series (1.0)
- Moxa — EDS-G508E Series (1.0)
- Moxa — EDS-G512E Series (1.0)
- Moxa — EDS-G516E Series (1.0)
- Moxa — EDS-P506E Series (1.0)
- Moxa — ICS-G7526A Series (1.0)
- Moxa — ICS-G7528A Series (1.0)
- Moxa — ICS-G7748A Series (1.0)
- Moxa — ICS-G7750A Series (1.0)
- Moxa — ICS-G7752A Series (1.0)
- Moxa — ICS-G7826A Series (1.0)
- Moxa — ICS-G7828A Series (1.0)
- Moxa — ICS-G7848A Series (1.0)
- Moxa — ICS-G7850A Series (1.0)
- Moxa — ICS-G7852A Series (1.0)
- Moxa — IKS-G6524A Series (1.0)
- Moxa — IKS-6726A Series (1.0)
- Moxa — IKS-6728A Series (1.0)
- Moxa — IKS-G6824A Series (1.0)
- Moxa — SDS-3006 Series (1.0)
- Moxa — SDS-3008 Series (1.0)
- Moxa — SDS-3010 Series (1.0)
- Moxa — SDS-3016 Series (1.0)
- Moxa — SDS-G3006 Series (1.0)
- Moxa — SDS-G3008 Series (1.0)
- Moxa — SDS-G3010 Series (1.0)
- Moxa — SDS-G3016 Series (1.0)
- Moxa — PT-7728 Series (1.0)
- Moxa — PT-7828 Series (1.0)
- Moxa — PT-G503 Series (1.0)
- Moxa — PT-G510 Series (1.0)

## References

- [CNA](https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240930-cve-2024-9404-denial-of-service-vulnerability-identified-in-the-vport-07-3-series)
- [CNA](https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240931-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-eds,-ics,-iks,-and-sds-switches)
- [CNA](https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.75%
- **EPSS Percentile:** 52.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-12._