Vulnerable Moxa devices expose industrial networks to attacks

Executive summary: Moxa disclosed two high-severity vulnerabilities affecting multiple cellular routers, secure routers, and network security appliances—CVE-2024-9138 (hard-coded credentials leading to root escalation) and CVE-2024-9140 (remote OS command injection allowing arbitrary code execution). The advisory identifies impacted models and firmware, provides firmware updates or vendor remediation guidance for many models, notes some devices currently lack patches, and recommends limiting network exposure and using firewalls/IDS/IPS while applying updates.