CVE:CVE-2021-39279
CNNVD:CNNVD-202109-067
Moxa TAP-323等都是中国Moxa公司的产品。Moxa TAP-323是一个系列铁路无线控制器。Moxa WAC-1001是一个系列铁路无线控制器。Moxa WAC-2004是一个系列铁路无线控制器。
Moxa 多款产品存在操作系统命令注入漏洞，该漏洞源于许多Moxa设备都存在安全漏洞。以下产品和版本受到影响：WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3.
solution:Upgrade moxa wac-2004_firmware to a higher version than 1.7,and avoid the version 1.7; Upgrade moxa wac-1001_firmware to a higher version than 2.1,and avoid the version 2.1; Upgrade moxa wac-1001-t_firmware to a higher version than 2.1,and avoid the version 2.1; Upgrade moxa oncell_g3470a-lte-eu_firmware to a higher version than 1.7,and avoid the version 1.7; Upgrade moxa oncell_g3470a-lte-eu-t_firmware to a higher version than 1.7,and avoid the version 1.7; Upgrade moxa tap-323-eu-ct-t_firmware to a higher version than 1.3,and avoid the version 1.3; Upgrade moxa tap-323-us-ct-t_firmware to a higher version than 1.3,and avoid the version 1.3; Upgrade moxa tap-323-jp-ct-t_firmware to a higher version than 1.3,and avoid the version 1.3; Upgrade moxa wdr-3124a-eu_firmware to a higher version than 2.3,and avoid the version 2.3; Upgrade moxa wdr-3124a-eu-t_firmware to a higher version than 2.3,and avoid the version 2.3; Upgrade moxa wdr-3124a-us_firmware to a higher version than 2.3,and avoid the version 2.3; Upgrade moxa wdr-3124a-us-t_firmware to a higher version than 2.3,and avoid the version 2.3