Search
Find a vulnerability
Search criteria
168 vulnerabilities by moxa
CVE-2026-111548 (GCVE-0-2026-111548)
Vulnerability from cvelistv5 – Published: 2026-10-27 10:17 – Updated: 2026-11-04 20:29
VLAI
EPSS
VEX
Summary
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 18:42 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | NPort W2150A-W4/W2250A-W4 Series |
Affected:
1.0 , ≤ 1.5
(custom)
cpe:2.3:a:moxa:nport_w2150a-w4_w2250a-w4_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111548",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T18:42:41.301639Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T20:29:49.205Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "NPort W2150A-W4/W2250A-W4 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.5",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:nport_w2150a-w4_w2250a-w4_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.5",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A stack-based buffer overflow vulnerability\u0026nbsp;exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational."
}
],
"value": "A stack-based buffer overflow vulnerability\u00a0exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100: Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121: Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T10:17:26.193Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to Moxa\u0027s security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers\u0026nbsp;"
}
],
"value": "Please refer to Moxa\u0027s security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-111548",
"datePublished": "2026-10-27T10:17:26.193Z",
"dateReserved": "2026-10-16T10:17:20.506Z",
"dateUpdated": "2026-11-04T20:29:49.205Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111461 (GCVE-0-2026-111461)
Vulnerability from cvelistv5 – Published: 2026-10-27 07:17 – Updated: 2026-11-04 15:00 Unsupported When Assigned
VLAI
EPSS
VEX
Title
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
Summary
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:52 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | OnCell G3150A-LTE Series |
Affected:
1.0.0
(custom)
cpe:2.3:a:moxa:oncell_g3150a-lte_series:1.0.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111461",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:52:33.059793Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T15:00:19.372Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "OnCell G3150A-LTE Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:oncell_g3150a-lte_series:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Abhinav Agarwal"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An OS command injection vulnerability exists in\u0026nbsp;OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device."
}
],
"value": "An OS command injection vulnerability exists in\u00a0OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device."
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88: OS Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T07:17:01.566Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"
}
],
"source": {
"discovery": "EXTERNAL"
},
"tags": [
"unsupported-when-assigned"
],
"title": "SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003ePlease refer to\u0026nbsp;the following mitigation measures to reduce the risk of exploitation:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eFor \u003c/span\u003e\u003cspan\u003eCVE-2026-111461, k\u003c/span\u003e\u003cspan\u003eeep the SMS functionality disabled unless it is required for operation. This functionality is disabled by default. If it is not needed, Moxa recommends leaving it disabled to reduce the risk of exploitation.\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "Please refer to\u00a0the following mitigation measures to reduce the risk of exploitation:\n\n * \n\nFor CVE-2026-111461, keep the SMS functionality disabled unless it is required for operation. This functionality is disabled by default. If it is not needed, Moxa recommends leaving it disabled to reduce the risk of exploitation."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-111461",
"datePublished": "2026-10-27T07:17:01.566Z",
"dateReserved": "2026-10-16T05:36:39.412Z",
"dateUpdated": "2026-11-04T15:00:19.372Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111460 (GCVE-0-2026-111460)
Vulnerability from cvelistv5 – Published: 2026-10-27 07:13 – Updated: 2026-11-04 15:00 Unsupported When Assigned
VLAI
EPSS
VEX
Title
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
Summary
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:52 UTC
CWE
- CWE-321 - Use of Hard-coded Cryptographic Key
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | OnCell G3150A-LTE Series |
Affected:
1.0.0
(custom)
cpe:2.3:a:moxa:oncell_g3150a-lte_series:1.0.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111460",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:52:30.415114Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T15:00:37.980Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "OnCell G3150A-LTE Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:oncell_g3150a-lte_series:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Abhinav Agarwal"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices\u0026nbsp;that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications."
}
],
"value": "A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices\u00a0that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37: Retrieves Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "CWE-321: Use of Hard-coded Cryptographic Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T07:13:51.550Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"
}
],
"source": {
"discovery": "EXTERNAL"
},
"tags": [
"unsupported-when-assigned"
],
"title": "Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003ePlease refer to\u0026nbsp;the following mitigation measures to reduce the risk of exploitation:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eFor CVE-2026-111460, reset the affected device to regenerate the device certificate and associated cryptographic key material.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "Please refer to\u00a0the following mitigation measures to reduce the risk of exploitation:\n\n * \n\nFor CVE-2026-111460, reset the affected device to regenerate the device certificate and associated cryptographic key material."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-111460",
"datePublished": "2026-10-27T07:13:51.550Z",
"dateReserved": "2026-10-16T05:36:37.951Z",
"dateUpdated": "2026-11-04T15:00:37.980Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111459 (GCVE-0-2026-111459)
Vulnerability from cvelistv5 – Published: 2026-10-27 07:08 – Updated: 2026-11-04 15:00
VLAI
EPSS
VEX
Title
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
Summary
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:52 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | Moxa Remote Connect Suite (MRC Client) |
Affected:
1.0.0 , ≤ 4.2.0
(custom)
Unaffected: 4.2.2 (custom) cpe:2.3:a:moxa:moxa_remote_connect_suite_mrc_client_:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111459",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:52:29.083307Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T15:00:47.536Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Moxa Remote Connect Suite (MRC Client)",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "4.2.0",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.2.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:moxa_remote_connect_suite_mrc_client_:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.2.0",
"versionStartIncluding": "1.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:moxa_remote_connect_suite_mrc_client_:4.2.2:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Abhinav Agarwal"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker\u0026nbsp;with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications."
}
],
"value": "An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker\u00a0with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications."
}
],
"impacts": [
{
"capecId": "CAPEC-94",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-94: Adversary in the Middle (AiTM)"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295: Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T07:08:17.598Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer Moxa\u0027s security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client\u0026nbsp;"
}
],
"value": "Please refer Moxa\u0027s security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-111459",
"datePublished": "2026-10-27T07:08:17.598Z",
"dateReserved": "2026-10-16T05:36:36.354Z",
"dateUpdated": "2026-11-04T15:00:47.536Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-109813 (GCVE-0-2026-109813)
Vulnerability from cvelistv5 – Published: 2026-10-16 02:57 – Updated: 2026-10-16 13:54
VLAI
EPSS
VEX
Title
Shared Hard-coded Root CA Private Key
Summary
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 13:53 UTC
CWE
- CWE-321 - Use of Hard-coded Cryptographic Key
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | AIG-302 Series |
Affected:
1.0.0 , ≤ 1.4.0
(custom)
Unaffected: 1.4.1 (custom) cpe:2.3:a:moxa:aig-302_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-109813",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-16T13:53:34.503674Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T13:54:15.659Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "AIG-302 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.4.0",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "1.4.1",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:aig-302_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.4.0",
"versionStartIncluding": "1.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:aig-302_series:1.4.1:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Ievgen Bondarenko"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa\u0027s\u0026nbsp;industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications."
}
],
"value": "A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa\u0027s\u00a0industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37: Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "CWE-321: Use of Hard-coded Cryptographic Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T02:57:52.388Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to Moxa Security Advisory:\u0026nbsp;\u003cdiv\u003ehttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products\u003c/div\u003e"
}
],
"value": "Please refer to Moxa Security Advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Shared Hard-coded Root CA Private Key",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-109813",
"datePublished": "2026-10-16T02:57:52.388Z",
"dateReserved": "2026-10-13T03:55:38.782Z",
"dateUpdated": "2026-10-16T13:54:15.659Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-109812 (GCVE-0-2026-109812)
Vulnerability from cvelistv5 – Published: 2026-10-16 02:54 – Updated: 2026-10-16 16:21
VLAI
EPSS
VEX
Title
Missing Authorization on Secret Endpoints
Summary
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 16:21 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | AIG-302 Series |
Affected:
1.0.0 , ≤ 1.4.0
(custom)
Unaffected: 1.4.1 cpe:2.3:a:moxa:aig-302_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-109812",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-16T16:21:18.492727Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T16:21:35.405Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "AIG-302 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.4.0",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "1.4.1"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:aig-302_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.4.0",
"versionStartIncluding": "1.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:aig-302_series:1.4.1:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Ievgen Bondarenko"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa\u0027s\u0026nbsp;industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material."
}
],
"value": "A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa\u0027s\u00a0industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material."
}
],
"impacts": [
{
"capecId": "CAPEC-1",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T02:54:46.573Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to Moxa Security Advisory:\u0026nbsp;\u003cdiv\u003ehttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products\u003c/div\u003e"
}
],
"value": "Please refer to Moxa Security Advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Missing Authorization on Secret Endpoints",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-109812",
"datePublished": "2026-10-16T02:54:46.573Z",
"dateReserved": "2026-10-13T03:55:36.792Z",
"dateUpdated": "2026-10-16T16:21:35.405Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86326 (GCVE-0-2026-86326)
Vulnerability from cvelistv5 – Published: 2026-10-02 10:21 – Updated: 2026-10-02 10:39
VLAI
EPSS
VEX
Summary
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-02 10:37 UTC
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | MGate MB3170 Series |
Affected:
1.0
cpe:2.3:a:moxa:mgate_mb3170_series:1.0:*:*:*:*:*:*:* |
|
| Moxa | MGate MB3270 Series |
Affected:
1.0
cpe:2.3:a:moxa:mgate_mb3270_series:1.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-86326",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T10:37:09.559538Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T10:39:59.785Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MGate MB3170 Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MGate MB3270 Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mgate_mb3170_series:1.0:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mgate_mb3270_series:1.0:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An improper verification of cryptographic signature vulnerability exists in protocol gateways\u0026nbsp;because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates."
}
],
"value": "An improper verification of cryptographic signature vulnerability exists in protocol gateways\u00a0because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates."
}
],
"impacts": [
{
"capecId": "CAPEC-475",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-475: Signature Spoofing by Improper Validation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347: Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T10:21:56.863Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269540-cve-2026-86325,-cve-2026-86326-two-vulnerabilities-in-protocol-gateways"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eUsers are advised to follow the applicable Security Hardening Guide for the MGate MB3000 or MGate 5000 Series when obtaining and updating firmware. The guides provide recommendations for securely obtaining firmware from official Moxa sources and performing firmware updates. Users should follow the applicable guidance to ensure that the correct and trusted firmware is obtained and that firmware updates are performed securely. For detailed mitigation guidance, please refer to the following Security Hardening Guides:\u003c/span\u003e\u003cul\u003e\u003cli\u003eThe Security Hardening Guide for the MGate 5000 Series\u003c/li\u003e\u003cli\u003eThe Security Hardening Guide for the MGate MB3000 Series\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "Users are advised to follow the applicable Security Hardening Guide for the MGate MB3000 or MGate 5000 Series when obtaining and updating firmware. The guides provide recommendations for securely obtaining firmware from official Moxa sources and performing firmware updates. Users should follow the applicable guidance to ensure that the correct and trusted firmware is obtained and that firmware updates are performed securely. For detailed mitigation guidance, please refer to the following Security Hardening Guides: * The Security Hardening Guide for the MGate 5000 Series\n * The Security Hardening Guide for the MGate MB3000 Series"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-86326",
"datePublished": "2026-10-02T10:21:56.863Z",
"dateReserved": "2026-09-07T06:34:04.814Z",
"dateUpdated": "2026-10-02T10:39:59.785Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86325 (GCVE-0-2026-86325)
Vulnerability from cvelistv5 – Published: 2026-10-02 10:18 – Updated: 2026-10-02 10:49
VLAI
EPSS
VEX
Summary
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as a read-only user to the web management interface could supply a specially crafted account name that exceeds the size of the internal stack buffer, resulting in corruption of program execution flow. Successful exploitation could allow an attacker to read sensitive information from device memory, including credentials, modify arbitrary memory contents, and disrupt device availability.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-02 10:49 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | MGate MB3170 Series |
Affected:
1.0 , ≤ 4.7
(custom)
cpe:2.3:a:moxa:mgate_mb3170_series:*:*:*:*:*:*:*:* |
|
| Moxa | MGate MB3270 Series |
Affected:
1.0 , ≤ 4.7
(custom)
cpe:2.3:a:moxa:mgate_mb3270_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-86325",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T10:49:27.817598Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T10:49:43.686Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MGate MB3170 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "4.7",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MGate MB3270 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "4.7",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mgate_mb3170_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.7",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mgate_mb3270_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.7",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A stack-based buffer overflow vulnerability exists in protocol gateways\u0027 account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as a read-only user to the web\u0026nbsp;management interface could supply a specially crafted account name that exceeds the size of the internal stack buffer, resulting in corruption of program execution flow. Successful exploitation could allow an attacker to read sensitive information from device memory, including credentials, modify arbitrary memory contents, and disrupt device availability."
}
],
"value": "A stack-based buffer overflow vulnerability exists in protocol gateways\u0027 account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as a read-only user to the web\u00a0management interface could supply a specially crafted account name that exceeds the size of the internal stack buffer, resulting in corruption of program execution flow. Successful exploitation could allow an attacker to read sensitive information from device memory, including credentials, modify arbitrary memory contents, and disrupt device availability."
}
],
"impacts": [
{
"capecId": "CAPEC-24",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-24: Filter Failure through Buffer Overflow"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121: Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T10:18:29.907Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269540-cve-2026-86325,-cve-2026-86326-two-vulnerabilities-in-protocol-gateways"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Moxa has developed appropriate solutions to address the vulnerability:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269540-cve-2026-86325,-cve-2026-86326-two-vulnerabilities-in-protocol-gateways"
}
],
"value": "Moxa has developed appropriate solutions to address the vulnerability:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269540-cve-2026-86325,-cve-2026-86326-two-vulnerabilities-in-protocol-gateways"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-86325",
"datePublished": "2026-10-02T10:18:29.907Z",
"dateReserved": "2026-09-07T06:34:02.910Z",
"dateUpdated": "2026-10-02T10:49:43.686Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-15579 (GCVE-0-2026-15579)
Vulnerability from cvelistv5 – Published: 2026-09-18 09:32 – Updated: 2026-09-18 10:39
VLAI
EPSS
VEX
Summary
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the authentication process to crash and result in a Denial of Service (DoS) attack.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-18 10:38 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | TN-4500B Series |
Affected:
1.0 , ≤ 2.0
(custom)
Unaffected: 2.1 (custom) cpe:2.3:a:moxa:tn-4500b_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-15579",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-18T10:38:44.190582Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T10:39:14.140Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TN-4500B Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "2.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.1",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:tn-4500b_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.0",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:tn-4500b_series:2.1:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Mask Lu"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the authentication process to crash and result in a Denial of Service (DoS) attack."
}
],
"value": "An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the authentication process to crash and result in a Denial of Service (DoS) attack."
}
],
"impacts": [
{
"capecId": "CAPEC-24",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-24: Filter Failure through Buffer Overflow"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T09:32:59.993Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-252620-cve-2026-15579-out-of-bounds-write-vulnerability-in-ethernet-switch"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Refer to Moxa\u0027s security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-252620-cve-2026-15579-out-of-bounds-write-vulnerability-in-ethernet-switch\u0026nbsp;"
}
],
"value": "Refer to Moxa\u0027s security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-252620-cve-2026-15579-out-of-bounds-write-vulnerability-in-ethernet-switch"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-15579",
"datePublished": "2026-09-18T09:32:59.993Z",
"dateReserved": "2026-07-13T09:51:45.547Z",
"dateUpdated": "2026-09-18T10:39:14.140Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10831 (GCVE-0-2026-10831)
Vulnerability from cvelistv5 – Published: 2026-06-16 13:46 – Updated: 2026-06-16 15:27
VLAI
EPSS
VEX
Title
Improper Authorization of Break Signal Commands in Devices
Summary
A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network access can send crafted requests to disrupt serial communication for an active user session.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-16 15:27 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | NPort 6000 Series |
Affected:
1.0 , ≤ 2.3
(custom)
|
|
| Moxa | CN2600 Series |
Affected:
1.0 , ≤ 4.6
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10831",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-16T15:27:21.022805Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T15:27:28.093Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "NPort 6000 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "2.3",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CN2600 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "4.6",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Artur Witek"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network access can send crafted requests to disrupt serial communication for an active user session.\u003c/p\u003e"
}
],
"value": "A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network access can send crafted requests to disrupt serial communication for an active user session."
}
],
"impacts": [
{
"capecId": "CAPEC-212",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-212: Functionality Misuse"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T13:46:27.325Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262370-cve-2026-10831-improper-authorization-vulnerability-in-serial-device-servers"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to the security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262370-cve-2026-10831-improper-authorization-vulnerability-in-serial-device-servers"
}
],
"value": "Please refer to the security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262370-cve-2026-10831-improper-authorization-vulnerability-in-serial-device-servers"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Improper Authorization of Break Signal Commands in Devices",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-10831",
"datePublished": "2026-06-16T13:46:27.325Z",
"dateReserved": "2026-06-04T10:11:26.724Z",
"dateUpdated": "2026-06-16T15:27:28.093Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10829 (GCVE-0-2026-10829)
Vulnerability from cvelistv5 – Published: 2026-06-16 10:18 – Updated: 2026-06-16 12:16
VLAI
EPSS
VEX
Summary
A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-16 12:16 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | NPort W2150A-W4/W2250A-W4 Series |
Affected:
1.0 , ≤ 1.5
(custom)
cpe:2.3:a:moxa:nport_w2150a-w4_w2250a-w4_series:*:*:*:*:*:*:*:* |
|
| Moxa | NPort W2150A/W2250A Series |
Affected:
1.0 , ≤ 2.3
(custom)
cpe:2.3:a:moxa:nport_w2150a_w2250a_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10829",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-16T12:16:38.936882Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T12:16:54.768Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "NPort W2150A-W4/W2250A-W4 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.5",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "NPort W2150A/W2250A Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "2.3",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:nport_w2150a-w4_w2250a-w4_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.5",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:nport_w2150a_w2250a_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.3",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Remi ONNO of CS GROUP France (Sopra Steria Group)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of\u0026nbsp;user-supplied input in the \"Server location\" parameter on the Basic settings page.\u0026nbsp;An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.\u003c/p\u003e"
}
],
"value": "A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of\u00a0user-supplied input in the \"Server location\" parameter on the Basic settings page.\u00a0An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100: Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121: Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T10:18:41.681Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to the security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v"
}
],
"value": "Please refer to the security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-10829",
"datePublished": "2026-06-16T10:18:41.681Z",
"dateReserved": "2026-06-04T09:42:27.847Z",
"dateUpdated": "2026-06-16T12:16:54.768Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10828 (GCVE-0-2026-10828)
Vulnerability from cvelistv5 – Published: 2026-06-16 10:16 – Updated: 2026-06-16 12:20
VLAI
EPSS
VEX
Summary
A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems from insufficient input validation and improper handling of externally supplied format strings. An attacker could exploit this vulnerability by sending crafted input to the web service, causing unintended memory disclosure. Successful exploitation may allow an attacker to leak sensitive memory contents and determine critical memory addresses, potentially bypassing Address Space Layout Randomization (ASLR) protections.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-16 12:19 UTC
CWE
- CWE-134 - Use of Externally-Controlled Format String
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | NPort W2150A-W4/W2250A-W4 Series |
Affected:
1.0 , ≤ 1.5
(custom)
cpe:2.3:a:moxa:nport_w2150a-w4_w2250a-w4_series:*:*:*:*:*:*:*:* |
|
| Moxa | NPort W2150A/W2250A Series |
Affected:
1.0 , ≤ 2.3
(custom)
cpe:2.3:a:moxa:nport_w2150a_w2250a_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10828",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-16T12:19:21.382045Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T12:20:06.556Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "NPort W2150A-W4/W2250A-W4 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.5",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "NPort W2150A/W2250A Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "2.3",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:nport_w2150a-w4_w2250a-w4_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.5",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:nport_w2150a_w2250a_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.3",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Remi ONNO of CS GROUP France (Sopra Steria Group)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A format string vulnerability has been found in the \"alias\" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems from insufficient input validation and improper handling of externally supplied format strings. An attacker could exploit this vulnerability by sending crafted input to the web service, causing unintended memory disclosure. Successful exploitation may allow an attacker to leak sensitive memory contents and determine critical memory addresses, potentially bypassing Address Space Layout Randomization (ASLR) protections."
}
],
"value": "A format string vulnerability has been found in the \"alias\" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems from insufficient input validation and improper handling of externally supplied format strings. An attacker could exploit this vulnerability by sending crafted input to the web service, causing unintended memory disclosure. Successful exploitation may allow an attacker to leak sensitive memory contents and determine critical memory addresses, potentially bypassing Address Space Layout Randomization (ASLR) protections."
}
],
"impacts": [
{
"capecId": "CAPEC-135",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-135: Format String Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-134",
"description": "CWE-134: Use of Externally-Controlled Format String",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T10:16:12.590Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to the security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v"
}
],
"value": "Please refer to the security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-10828",
"datePublished": "2026-06-16T10:16:12.590Z",
"dateReserved": "2026-06-04T09:42:25.815Z",
"dateUpdated": "2026-06-16T12:20:06.556Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10825 (GCVE-0-2026-10825)
Vulnerability from cvelistv5 – Published: 2026-06-16 08:51 – Updated: 2026-11-02 06:13
VLAI
EPSS
VEX
Title
Improper JSON Input Validation in WebSocket API Leads to Denial of Service
Summary
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-16 12:24 UTC
CWE
- CWE-1287 - Improper Validation of Specified Type of Input
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | NPort 6000-G2 Series |
Affected:
1.0 , ≤ 1.1.0
(custom)
Unaffected: 1.2.0 (custom) cpe:2.3:a:moxa:nport_6000-g2_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10825",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-16T12:24:31.669564Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T12:24:40.418Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "NPort 6000-G2 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.1.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "1.2.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:nport_6000-g2_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.1.0",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:nport_6000-g2_series:1.2.0:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Leo Lin"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot.\u003c/p\u003e"
}
],
"value": "A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot."
}
],
"impacts": [
{
"capecId": "CAPEC-28",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-28: Fuzzing"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1287",
"description": "CWE-1287: Improper Validation of Specified Type of Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T06:13:26.343Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to the security advisory:\u0026nbsp;https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers\u0026nbsp;"
}
],
"value": "Please refer to the security advisory:\u00a0https://www.moxa.com/en/support/product-support/security-advisory/mpsa-268270-cve-2026-10825-improper-validation-of-input-vulnerability-in-serial-device-servers"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Improper JSON Input Validation in WebSocket API Leads to Denial of Service",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-10825",
"datePublished": "2026-06-16T08:51:57.193Z",
"dateReserved": "2026-06-04T08:28:37.449Z",
"dateUpdated": "2026-11-02T06:13:26.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-9266 (GCVE-0-2026-9266)
Vulnerability from cvelistv5 – Published: 2026-06-12 10:00 – Updated: 2026-06-12 13:29
VLAI
EPSS
VEX
Summary
A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure against CVE-2026-0714. However, an omission in the authorization session configuration causes the parameter encryption to provide no effective protection. An attacker with invasive physical access to the device can still capture TPM communications on the SPI bus and derive the LUKS disk encryption key in plaintext. While successful exploitation results in full compromise of the encrypted disk volume, the attack requires invasive physical access, including opening the device and attaching external equipment to the SPI bus. Remote exploitation is not possible, and the attack does not affect any downstream systems.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-12 13:29 UTC
CWE
- CWE-325 - Missing Cryptographic Step
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | UC-1200A Series |
Affected:
1.0 , ≤ 1.4
(custom)
cpe:2.3:a:moxa:uc-1200a_series:*:*:os_image_mil3_secure_version_:*:*:*:*:* |
Date Public
2026-06-12 10:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-9266",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-12T13:29:27.309419Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T13:29:34.626Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"OS image\u00a0(MIL3 Secure version)"
],
"product": "UC-1200A Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.4",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:uc-1200a_series:*:*:os_image_mil3_secure_version_:*:*:*:*:*",
"versionEndIncluding": "1.4",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Cyloq"
}
],
"datePublic": "2026-06-12T10:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Missing Required Cryptographic Step vulnerability has been identified in Moxa\u0027s embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure against CVE-2026-0714. However, an omission in the authorization session configuration causes the parameter encryption to provide no effective protection.\u0026nbsp;An attacker with invasive physical access to the device can still capture TPM communications on the SPI bus and derive the LUKS disk encryption key in plaintext. While successful exploitation results in full compromise of the encrypted disk volume, the attack requires invasive physical access, including opening the device and attaching external equipment to the SPI bus. Remote exploitation is not possible, and the attack does not affect any downstream systems."
}
],
"value": "A Missing Required Cryptographic Step vulnerability has been identified in Moxa\u0027s embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure against CVE-2026-0714. However, an omission in the authorization session configuration causes the parameter encryption to provide no effective protection.\u00a0An attacker with invasive physical access to the device can still capture TPM communications on the SPI bus and derive the LUKS disk encryption key in plaintext. While successful exploitation results in full compromise of the encrypted disk volume, the attack requires invasive physical access, including opening the device and attaching external equipment to the SPI bus. Remote exploitation is not possible, and the attack does not affect any downstream systems."
}
],
"impacts": [
{
"capecId": "CAPEC-699",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-699: Eavesdropping on a Monitor"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-325",
"description": "CWE-325: Missing Cryptographic Step",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T10:00:33.056Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-266240-cve-2026-9266-missing-required-cryptographic-step-vulnerability-in-industrial-computers"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Please refer to Moxa\u0027s security advisory."
}
],
"value": "Please refer to Moxa\u0027s security advisory."
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-9266",
"datePublished": "2026-06-12T10:00:33.056Z",
"dateReserved": "2026-05-22T02:41:04.026Z",
"dateUpdated": "2026-06-12T13:29:34.626Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-3868 (GCVE-0-2026-3868)
Vulnerability from cvelistv5 – Published: 2026-04-27 02:56 – Updated: 2026-11-02 06:12
VLAI
EPSS
VEX
Summary
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive. Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation. While successful exploitation can severely impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-27 15:13 UTC
CWE
- CWE-130 - Improper Handling of Length Parameter Inconsistency
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | EDR-8010 Series |
Affected:
1.0 , ≤ 3.23
(custom)
Unaffected: 3.24 (custom) cpe:2.3:a:moxa:edr-8010_series:*:*:*:*:*:*:*:* |
|
| Moxa | EDR-G9010 Series |
Affected:
1.0 , ≤ 3.23.1
(custom)
Unaffected: 3.24 (custom) cpe:2.3:a:moxa:edr-g9010_series:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-3868",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-27T15:13:55.314280Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-27T15:14:14.677Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EDR-8010 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "3.23",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.24",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EDR-G9010 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "3.23.1",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.24",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:edr-8010_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.23",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:edr-8010_series:3.24:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:edr-g9010_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.23.1",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:edr-g9010_series:3.24:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Leo Lin"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn improper handling of the length parameter inconsistency vulnerability has been identified in Moxa\u2019s Secure Router.\u0026nbsp;Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive.\u0026nbsp;Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation.\u0026nbsp;While successful exploitation can\u0026nbsp;severely\u0026nbsp;impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified.\u003c/p\u003e"
}
],
"value": "An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa\u2019s Secure Router.\u00a0Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive.\u00a0Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation.\u00a0While successful exploitation can\u00a0severely\u00a0impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified."
}
],
"impacts": [
{
"capecId": "CAPEC-47",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-47: Buffer Overflow via Parameter Expansion"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-130",
"description": "CWE-130: Improper Handling of Length Parameter Inconsistency",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T06:12:49.479Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-3868",
"datePublished": "2026-04-27T02:56:34.266Z",
"dateReserved": "2026-03-10T07:56:29.470Z",
"dateUpdated": "2026-11-02T06:12:49.479Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-3867 (GCVE-0-2026-3867)
Vulnerability from cvelistv5 – Published: 2026-04-27 02:54 – Updated: 2026-11-02 06:12
VLAI
EPSS
VEX
Summary
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-27 15:14 UTC
CWE
- CWE-282 - Improper Ownership Management
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | EDR-8010 Series |
Affected:
1.0 , ≤ 3.23
(custom)
Unaffected: 3.24 (custom) cpe:2.3:a:moxa:edr-8010_series:*:*:*:*:*:*:*:* |
|
| Moxa | EDR-G9010 Series |
Affected:
1.0 , ≤ 3.23.1
(custom)
Affected: 3.24 (custom) cpe:2.3:a:moxa:edr-g9010_series:*:*:*:*:*:*:*:* cpe:2.3:a:moxa:edr-g9010_series:3.24:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-3867",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-27T15:14:27.349608Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-27T15:14:35.199Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EDR-8010 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "3.23",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.24",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EDR-G9010 Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "3.23.1",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "3.24",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:edr-8010_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.23",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:edr-8010_series:3.24:*:*:*:*:*:*:*",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:edr-g9010_series:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.23.1",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:edr-g9010_series:3.24:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Leo Lin"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An improper ownership management vulnerability has been identified in Moxa\u2019s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition \u2014 when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified."
}
],
"value": "An improper ownership management vulnerability has been identified in Moxa\u2019s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition \u2014 when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified."
}
],
"impacts": [
{
"capecId": "CAPEC-122",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-122: Privilege Abuse"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-282",
"description": "CWE-282: Improper Ownership Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T06:12:03.709Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-3867",
"datePublished": "2026-04-27T02:54:00.508Z",
"dateReserved": "2026-03-10T07:56:27.311Z",
"dateUpdated": "2026-11-02T06:12:03.709Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-4483 (GCVE-0-2026-4483)
Vulnerability from cvelistv5 – Published: 2026-04-08 07:25 – Updated: 2026-04-08 13:53
VLAI
EPSS
VEX
Summary
An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGeneralIo, exposes IOCTL methods that permit direct read and write access to MSR and system memory. A local attacker with high privileges could abuse these interfaces to perform unauthorized operations. Successful exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (BSoD) on Windows 10 and 11 systems, leading to a denial-of-service condition. The vulnerability could slightly affect the confidentiality and integrity of the device, but availability might be heavily impacted. No impact to the subsequent system has been identified.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-08 13:53 UTC
CWE
- CWE-782 - Exposed IOCTL with Insufficient Access Control
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | MxGeneralIo |
Affected:
1.0 , < 1.4.0
(custom)
cpe:2.3:a:moxa:mxgeneralio:*:*:windows_7_x86:*:*:*:*:* |
|
| Moxa | MxGeneralIo |
Affected:
1.0 , < 1.5.0
(custom)
cpe:2.3:a:moxa:mxgeneralio:*:*:windows_10:*:*:*:*:* cpe:2.3:a:moxa:mxgeneralio:*:*:windows_11:*:*:*:*:* |
|
| Moxa | MxGeneralIo |
Affected:
1.0 , < 1.4.0
(custom)
cpe:2.3:a:moxa:mxgeneralio:*:*:windows_7_x64:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-4483",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-08T13:53:18.890748Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-08T13:53:26.094Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows 7 x86"
],
"product": "MxGeneralIo",
"vendor": "Moxa",
"versions": [
{
"lessThan": "1.4.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows 10",
"Windows 11"
],
"product": "MxGeneralIo",
"vendor": "Moxa",
"versions": [
{
"lessThan": "1.5.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows 7 x64"
],
"product": "MxGeneralIo",
"vendor": "Moxa",
"versions": [
{
"lessThan": "1.4.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mxgeneralio:*:*:windows_7_x86:*:*:*:*:*",
"versionEndExcluding": "1.4.0",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mxgeneralio:*:*:windows_10:*:*:*:*:*",
"versionEndExcluding": "1.5.0",
"versionStartIncluding": "1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:moxa:mxgeneralio:*:*:windows_11:*:*:*:*:*",
"versionEndExcluding": "1.5.0",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moxa:mxgeneralio:*:*:windows_7_x64:*:*:*:*:*",
"versionEndExcluding": "1.4.0",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jason Huang from TXOne Networks Inc."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An exposed IOCTL with an\u0026nbsp; insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa\u2019s industrial x86 computers.\u0026nbsp;The affected utility, MxGeneralIo, exposes IOCTL methods that permit direct read and write access to MSR and system memory.\u0026nbsp;A local attacker with high privileges could abuse these interfaces to perform unauthorized operations.\u0026nbsp;Successful exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (BSoD) on Windows 10 and 11 systems, leading to a denial-of-service condition.\u0026nbsp;The vulnerability could slightly affect the confidentiality and integrity of the device, but availability might be heavily impacted.\u0026nbsp;No impact to the subsequent system has been identified."
}
],
"value": "An exposed IOCTL with an\u00a0 insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa\u2019s industrial x86 computers.\u00a0The affected utility, MxGeneralIo, exposes IOCTL methods that permit direct read and write access to MSR and system memory.\u00a0A local attacker with high privileges could abuse these interfaces to perform unauthorized operations.\u00a0Successful exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (BSoD) on Windows 10 and 11 systems, leading to a denial-of-service condition.\u00a0The vulnerability could slightly affect the confidentiality and integrity of the device, but availability might be heavily impacted.\u00a0No impact to the subsequent system has been identified."
}
],
"impacts": [
{
"capecId": "CAPEC-122",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-122: Privilege Abuse"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-782",
"description": "CWE-782: Exposed IOCTL with Insufficient Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-08T09:31:29.457Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-254811-cve-2026-4483-exposed-ioctl-with-insufficient-access-control-vulnerability-in-the-utility-for-x86-computers"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-4483",
"datePublished": "2026-04-08T07:25:03.348Z",
"dateReserved": "2026-03-20T06:25:28.602Z",
"dateUpdated": "2026-04-08T13:53:26.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0715 (GCVE-0-2026-0715)
Vulnerability from cvelistv5 – Published: 2026-02-05 17:01 – Updated: 2026-02-05 17:34
VLAI
EPSS
VEX
Summary
Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface. Access to the bootloader menu does not allow full system takeover or privilege escalation. The bootloader enforces digital signature verification and only permits flashing of Moxa-signed images. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential temporary denial-of-service condition if a valid image is reflashed. Remote exploitation is not possible.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-05 17:33 UTC
CWE
- CWE-522 - Insufficiently Protected Credentials
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | UC-1200A Series |
Affected:
1.0 , ≤ 1.4
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0715",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-05T17:33:53.012256Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T17:34:04.225Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "UC-1200A Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.4",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Cyloq"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eMoxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with \u003c/span\u003e\u003cstrong\u003ephysical access\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;to the device could use this information to access the bootloader menu via a serial interface. \u0026nbsp;Access to the bootloader menu \u003c/span\u003e\u003cstrong\u003edoes not allow full system takeover or privilege escalation\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e. The bootloader enforces digital signature verification and only permits flashing of \u003c/span\u003e\u003cstrong\u003eMoxa-signed images\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential \u003c/span\u003e\u003cstrong\u003etemporary denial-of-service condition\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;if a valid image is reflashed. \u003c/span\u003e\u003cstrong\u003eRemote exploitation is not possible\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e.\u003c/span\u003e\u003cbr\u003e"
}
],
"value": "Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access\u00a0to the device could use this information to access the bootloader menu via a serial interface. \u00a0Access to the bootloader menu does not allow full system takeover or privilege escalation. The bootloader enforces digital signature verification and only permits flashing of Moxa-signed images. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential temporary denial-of-service condition\u00a0if a valid image is reflashed. Remote exploitation is not possible."
}
],
"impacts": [
{
"capecId": "CAPEC-102",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-102: Session Sidejacking"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522: Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T17:01:20.476Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Refer to\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers\"\u003ehttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026...\u003c/a\u003e"
}
],
"value": "Refer to\u00a0 https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026... https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-0715",
"datePublished": "2026-02-05T17:01:20.476Z",
"dateReserved": "2026-01-08T10:25:24.767Z",
"dateUpdated": "2026-02-05T17:34:04.225Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0714 (GCVE-0-2026-0714)
Vulnerability from cvelistv5 – Published: 2026-02-05 16:58 – Updated: 2026-02-05 17:28
VLAI
EPSS
VEX
Summary
A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and attaching external equipment to the SPI bus to capture TPM communications. If successful, the captured data may allow offline decryption of eMMC contents. This attack cannot be performed through brief or opportunistic physical access and requires extended physical access, possession of the device, appropriate equipment, and sufficient time for signal capture and analysis. Remote exploitation is not possible.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-05 17:27 UTC
CWE
- CWE-319 - Cleartext Transmission of Sensitive Information
Assigner
Moxa
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.moxa.com/en/support/product-support/s… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | UC-1200A Series |
Affected:
1.0 , ≤ 1.4
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0714",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-05T17:27:16.212381Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T17:28:18.287Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "UC-1200A Series",
"vendor": "Moxa",
"versions": [
{
"lessThanOrEqual": "1.4",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Cyloq"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA physical attack vulnerability exists in certain Moxa industrial computers using \u003c/span\u003e\u003cstrong\u003eTPM-backed LUKS full-disk encryption\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;on \u003c/span\u003e\u003cstrong\u003eMoxa Industrial Linux 3\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires \u003c/span\u003e\u003cstrong\u003einvasive physical access\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e, including opening the device and attaching external equipment to the SPI bus to capture TPM communications. If successful, the captured data \u003c/span\u003e\u003cstrong\u003emay allow offline decryption of eMMC contents\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e. This attack \u003c/span\u003e\u003cstrong\u003ecannot be performed through brief or opportunistic physical access\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;and requires extended physical access, possession of the device, appropriate equipment, and sufficient time for signal capture and analysis. \u003c/span\u003e\u003cstrong\u003eRemote exploitation is not possible\u003c/strong\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e.\u003c/span\u003e\u003cbr\u003e"
}
],
"value": "A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption\u00a0on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and attaching external equipment to the SPI bus to capture TPM communications. If successful, the captured data may allow offline decryption of eMMC contents. This attack cannot be performed through brief or opportunistic physical access\u00a0and requires extended physical access, possession of the device, appropriate equipment, and sufficient time for signal capture and analysis. Remote exploitation is not possible."
}
],
"impacts": [
{
"capecId": "CAPEC-401",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-401: Physically Hacking Hardware"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-319",
"description": "CWE-319: Cleartext Transmission of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T16:58:50.181Z",
"orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"shortName": "Moxa"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Refer to\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers\"\u003ehttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026...\u003c/a\u003e"
}
],
"value": "Refer to\u00a0 https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026... https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
"assignerShortName": "Moxa",
"cveId": "CVE-2026-0714",
"datePublished": "2026-02-05T16:58:50.181Z",
"dateReserved": "2026-01-08T10:25:22.303Z",
"dateUpdated": "2026-02-05T17:28:18.287Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CERTFR-2026-AVI-1393
Vulnerability from certfr_avis - Published: 2026-10-27 - Updated: 2026-10-27
De multiples vulnérabilités ont été découvertes dans les produits Moxa. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
L'éditeur indique qu'il est nécessaire de contacter le support technique pour obtenir le correctif lié aux produits NPort W2150A-W4/W2250A-W4 Series et Remote Connect Suite. L'éditeur indique que le produit OnCell G3150A-LTE Series est en fin de vie.
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | NPort W2150A-W4/W2250A-W4 Series | NPort W2150A-W4/W2250A-W4 Series versions antérieures à v1.5.9 | ||
| Moxa | Remote Connect Suite | Remote Connect Suite versions antérieures à v4.2.2 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "NPort W2150A-W4/W2250A-W4 Series versions ant\u00e9rieures \u00e0 v1.5.9",
"product": {
"name": "NPort W2150A-W4/W2250A-W4 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "Remote Connect Suite versions ant\u00e9rieures \u00e0 v4.2.2",
"product": {
"name": "Remote Connect Suite",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "L\u0027\u00e9diteur indique qu\u0027il est n\u00e9cessaire de contacter le support technique pour obtenir le correctif li\u00e9 aux produits NPort W2150A-W4/W2250A-W4 Series et Remote Connect Suite.\nL\u0027\u00e9diteur indique que le produit OnCell G3150A-LTE Series est en fin de vie.",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-111460",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111460"
},
{
"name": "CVE-2026-111459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111459"
},
{
"name": "CVE-2026-111461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111461"
},
{
"name": "CVE-2026-111548",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111548"
}
],
"initial_release_date": "2026-10-27T00:00:00",
"last_revision_date": "2026-10-27T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1393",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-261250",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-269510",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client"
}
]
}
CERTFR-2026-AVI-1327
Vulnerability from certfr_avis - Published: 2026-10-16 - Updated: 2026-10-16
De multiples vulnérabilités ont été découvertes dans Moxa AIG-302 Series. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | AIG-302 Series | AIG-302 Series versions antérieures à 1.4.1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "AIG-302 Series versions ant\u00e9rieures \u00e0 1.4.1",
"product": {
"name": "AIG-302 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-109813",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109813"
},
{
"name": "CVE-2026-109812",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109812"
}
],
"initial_release_date": "2026-10-16T00:00:00",
"last_revision_date": "2026-10-16T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1327",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-16T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Moxa AIG-302 Series. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Moxa AIG-302 Series",
"vendor_advisories": [
{
"published_at": "2026-10-16",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-262560",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products"
}
]
}
CERTFR-2026-AVI-1250
Vulnerability from certfr_avis - Published: 2026-10-02 - Updated: 2026-10-02
De multiples vulnérabilités ont été découvertes dans les produits Moxa. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | MGate MB3480 Series | MGate MB3480 Series versions antérieures à v4.5.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5114 Series | MGate 5114 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5216 Series | MGate 5216 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate W5208 Series | MGate W5208 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5119 Series | MGate 5119 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5101-PBM-MN Series | MGate 5101-PBM-MN Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3170 Series | MGate MB3170 Series versions antérieures à v4.7.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5102-PBM-PN Series | MGate 5102-PBM-PN Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3280 Series | MGate MB3280 Series versions antérieures à v4.6.3, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5111 Series | MGate 5111 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5217 Series | MGate 5217 Series versions antérieures à v1.5.5, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3180 Series | MGate MB3180 Series versions antérieures à v2.7.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5105-MB-EIP Series | MGate 5105-MB-EIP Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate EIP3170 Series | MGate EIP3170 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5109 Series | MGate 5109 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5103 Series | MGate 5103 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3660 Series | MGate MB3660 Series versions antérieures à v3.4.5, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5118 Series | MGate 5118 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate W5108 Series | MGate W5108 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate EIP3270 Series | MGate EIP3270 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3270 Series | MGate MB3270 Series versions antérieures à v4.7.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MGate MB3480 Series versions ant\u00e9rieures \u00e0 v4.5.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3480 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5114 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5114 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5216 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5216 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate W5208 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate W5208 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5119 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5119 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5101-PBM-MN Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5101-PBM-MN Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3170 Series versions ant\u00e9rieures \u00e0 v4.7.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3170 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5102-PBM-PN Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5102-PBM-PN Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3280 Series versions ant\u00e9rieures \u00e0 v4.6.3, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3280 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5111 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5111 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5217 Series versions ant\u00e9rieures \u00e0 v1.5.5, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5217 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3180 Series versions ant\u00e9rieures \u00e0 v2.7.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3180 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5105-MB-EIP Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5105-MB-EIP Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate EIP3170 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate EIP3170 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5109 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5109 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5103 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5103 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3660 Series versions ant\u00e9rieures \u00e0 v3.4.5, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3660 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5118 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5118 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate W5108 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate W5108 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate EIP3270 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate EIP3270 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3270 Series versions ant\u00e9rieures \u00e0 v4.7.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3270 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-86326",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86326"
},
{
"name": "CVE-2026-86325",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86325"
}
],
"initial_release_date": "2026-10-02T00:00:00",
"last_revision_date": "2026-10-02T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1250",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-02T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-10-02",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-269540",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269540-cve-2026-86325,-cve-2026-86326-two-vulnerabilities-in-protocol-gateways"
}
]
}
CERTFR-2026-AVI-1205
Vulnerability from certfr_avis - Published: 2026-09-18 - Updated: 2026-09-18
Une vulnérabilité a été découverte dans les produits Moxa. Elle permet à un attaquant de provoquer un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | TN-4500B Series | TN-4500B Series versions antérieures à 2.1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "TN-4500B Series versions ant\u00e9rieures \u00e0 2.1",
"product": {
"name": "TN-4500B Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-15579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15579"
}
],
"initial_release_date": "2026-09-18T00:00:00",
"last_revision_date": "2026-09-18T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1205",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-18T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Moxa. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-09-18",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-252620",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-252620-cve-2026-15579-out-of-bounds-write-vulnerability-in-ethernet-switch"
}
]
}
CERTFR-2026-AVI-0743
Vulnerability from certfr_avis - Published: 2026-06-12 - Updated: 2026-06-12
Une vulnérabilité a été découverte dans les produits Moxa. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | UC-4400A Series | séries UC-4400A versions antérieures à MIL3.4.1 sans les derniers correctifs de sécurité | ||
| Moxa | UC-2200A Series | séries UC-2200A versions antérieures à MIL4.0.0 sans les derniers correctifs de sécurité | ||
| Moxa | UC-2200A Series | séries UC-2200A versions antérieures à MIL3.4.1 sans les derniers correctifs de sécurité | ||
| Moxa | UC-3400A Series | séries UC-3400A versions antérieures à MIL4.0.0 sans les derniers correctifs de sécurité | ||
| Moxa | V1200 Series | séries V1200 versions antérieures à MIL3 sans les derniers correctifs de sécurité | ||
| Moxa | UC-4400A Series | séries UC-4400A versions antérieures à MIL4.0.0 sans les derniers correctifs de sécurité | ||
| Moxa | V2406C Series | modèles V2406C WL toutes versions | ||
| Moxa | V3200 Series | séries V3200 versions antérieures à MIL3 sans les derniers correctifs de sécurité | ||
| Moxa | V3400 Series | séries V3400 versions antérieures à MIL sans les derniers correctifs de sécurité | ||
| Moxa | UC-1200A Series | séries UC-1200A versions antérieures à MIL3.4.1 sans les derniers correctifs de sécurité | ||
| Moxa | UC-1200A Series | séries UC-1200A versions antérieures à MIL4.0.0 sans les derniers correctifs de sécurité | ||
| Moxa | UC-8200 Series | séries UC-8200 versions antérieures à MIL3.4.1 sans les derniers correctifs de sécurité | ||
| Moxa | UC-3400A Series | séries UC-3400A versions antérieures à MIL3.4.1 sans les derniers correctifs de sécurité |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "s\u00e9ries UC-4400A versions ant\u00e9rieures \u00e0 MIL3.4.1 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-4400A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-2200A versions ant\u00e9rieures \u00e0 MIL4.0.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-2200A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-2200A versions ant\u00e9rieures \u00e0 MIL3.4.1 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-2200A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-3400A versions ant\u00e9rieures \u00e0 MIL4.0.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-3400A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries V1200 versions ant\u00e9rieures \u00e0 MIL3 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "V1200 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-4400A versions ant\u00e9rieures \u00e0 MIL4.0.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-4400A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "mod\u00e8les V2406C WL toutes versions",
"product": {
"name": "V2406C Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries V3200 versions ant\u00e9rieures \u00e0 MIL3 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "V3200 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries V3400 versions ant\u00e9rieures \u00e0 MIL sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "V3400 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-1200A versions ant\u00e9rieures \u00e0 MIL3.4.1 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-1200A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-1200A versions ant\u00e9rieures \u00e0 MIL4.0.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-1200A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-8200 versions ant\u00e9rieures \u00e0 MIL3.4.1 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-8200 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "s\u00e9ries UC-3400A versions ant\u00e9rieures \u00e0 MIL3.4.1 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "UC-3400A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-9266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9266"
}
],
"initial_release_date": "2026-06-12T00:00:00",
"last_revision_date": "2026-06-12T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0743",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Moxa. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-06-12",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-266240",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-266240-cve-2026-9266-missing-required-cryptographic-step-vulnerability-in-industrial-computers"
}
]
}
CERTFR-2026-AVI-0499
Vulnerability from certfr_avis - Published: 2026-04-27 - Updated: 2026-04-27
De multiples vulnérabilités ont été découvertes dans les produits Moxa. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | OnCell G4302-LTE4 Series | OnCell G4302-LTE4 Series versions antérieures ou égales à v3.23.0 sans le dernier correctif de sécurité | ||
| Moxa | TN-4900 Series | TN-4900 Series versions antérieures à v3.24 | ||
| Moxa | EDR-8010 Series | EDR-8010 Series versions antérieures à v3.24 | ||
| Moxa | EDR-8010 Series | EDR-G9010 Series versions antérieures à v3.24 | ||
| Moxa | EDF-G1002-BP Series | EDF-G1002-BP Series versions antérieures à v3.24 | ||
| Moxa | OnCell G4302-LTE4 Series | OnCell G4308-LTE4 Series versions antérieures ou égales à v3.23.0 sans le dernier correctif de sécurité |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "OnCell G4302-LTE4 Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v3.23.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "OnCell G4302-LTE4 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "TN-4900 Series versions ant\u00e9rieures \u00e0 v3.24",
"product": {
"name": "TN-4900 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EDR-8010 Series versions ant\u00e9rieures \u00e0 v3.24",
"product": {
"name": "EDR-8010 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EDR-G9010 Series versions ant\u00e9rieures \u00e0 v3.24",
"product": {
"name": "EDR-8010 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EDF-G1002-BP Series versions ant\u00e9rieures \u00e0 v3.24",
"product": {
"name": "EDF-G1002-BP Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "OnCell G4308-LTE4 Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v3.23.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "OnCell G4302-LTE4 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-3867",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3867"
},
{
"name": "CVE-2026-3868",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3868"
}
],
"initial_release_date": "2026-04-27T00:00:00",
"last_revision_date": "2026-04-27T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0499",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-04-27",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-261521",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons"
}
]
}
CERTFR-2026-AVI-0458
Vulnerability from certfr_avis - Published: 2026-04-20 - Updated: 2026-04-20
Une vulnérabilité a été découverte dans les produits Moxa. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | PT-510 Series | PT-510 Series versions antérieures à v3.8.12 | ||
| Moxa | PT-G510 Series | PT-G510 Series versions antérieures à v6.5.22 | ||
| Moxa | PT-7828 Series | PT-7828 Series versions antérieures à v4.0.8 | ||
| Moxa | PT-G503 Series | PT-G503 Series versions antérieures à v5.3.12 | ||
| Moxa | PT-G7728 Series | PT-G7728 Series versions antérieures à v6.6 | ||
| Moxa | PT-G7828 Series | PT-G7828 Series versions antérieures à v6.6 | ||
| Moxa | PT-7528 Series | PT-7528 Series versions antérieures à v5.0.34 | ||
| Moxa | PT-7728 Series | PT-7728 Series versions antérieures à v3.9.6 | ||
| Moxa | PT-508 Series | PT-508 Series versions antérieures à v3.8.12 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PT-510 Series versions ant\u00e9rieures \u00e0 v3.8.12",
"product": {
"name": "PT-510 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-G510 Series versions ant\u00e9rieures \u00e0 v6.5.22",
"product": {
"name": "PT-G510 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-7828 Series versions ant\u00e9rieures \u00e0 v4.0.8",
"product": {
"name": "PT-7828 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-G503 Series versions ant\u00e9rieures \u00e0 v5.3.12",
"product": {
"name": "PT-G503 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-G7728 Series versions ant\u00e9rieures \u00e0 v6.6",
"product": {
"name": "PT-G7728 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-G7828 Series versions ant\u00e9rieures \u00e0 v6.6",
"product": {
"name": "PT-G7828 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-7528 Series versions ant\u00e9rieures \u00e0 v5.0.34",
"product": {
"name": "PT-7528 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-7728 Series versions ant\u00e9rieures \u00e0 v3.9.6",
"product": {
"name": "PT-7728 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "PT-508 Series versions ant\u00e9rieures \u00e0 v3.8.12",
"product": {
"name": "PT-508 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2020-11868",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11868"
}
],
"initial_release_date": "2026-04-20T00:00:00",
"last_revision_date": "2026-04-20T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0458",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-20T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Moxa. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-04-20",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-258681",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258681-cve-2020-11868-ntp-vulnerability-in-ethernet-switches"
}
]
}
CERTFR-2026-AVI-0405
Vulnerability from certfr_avis - Published: 2026-04-08 - Updated: 2026-04-08
Une vulnérabilité a été découverte dans les produits Moxa. Elle permet à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | BXP-C100 Series | BXP-C100 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3120 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-682C Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | EXPC-F2150W Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-1200 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V2201 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | BXP-C100 Series | BXP-A100 Series sur Windows 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | EXPC-F2120W Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-1100 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2121 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V2403C Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | RKS-G4000 Series | RKP-A110 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-3201 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-3201 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-720 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-1100 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3150W Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V3400 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3070W Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-682C Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2101 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3120W Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3070W Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-681C Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DRP-C100 Series | DRP-C100 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2121 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2120 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3150 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V2201 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3150W Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-720 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V2406C Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-820E Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | RKS-G4000 Series | RKP-A110 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | RKS-G4000 Series | RKP-C220 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3120 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-820E Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | RKS-G4000 Series | RKP-C110 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V2406C Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2070 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-681C Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2120 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | BXP-C100 Series | BXP-A100 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V3400 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DRP-A100 Series | DRP-A100 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | BXP-C100 Series | BXP-A101 Serie sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2070 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V2403C Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DRP-C100 Series | DRP-C100 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | RKS-G4000 Series | RKP-C110 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-820C Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3150 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-7400 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-820C Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3120W Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V3200 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | V2201 Series | V3200 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3100 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DRP-A100 Series | DRP-A100 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-680 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | EXPC-F2120W Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-7400 Series sur Windows 10 ou Windows 11 versions antérieures à v1.5.0 sans le dernier correctif de sécurité | ||
| Moxa | DA-681A Series | DA-680 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | BXP-C100 Series | BXP-A101 Series sur Windows 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | EXPC-F2150W Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | MC-1100 Series | MC-1200 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-3100 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | RKS-G4000 Series | RKP-C220 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | N/A | MPC-2101 Series sur Window 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité | ||
| Moxa | BXP-C100 Series | BXP-C100 Series sur Windows 7 versions antérieures à v1.4.0 sans le dernier correctif de sécurité |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "BXP-C100 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "BXP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3120 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-682C Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EXPC-F2150W Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-1200 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V2201 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "BXP-A100 Series sur Windows 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "BXP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EXPC-F2120W Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-1100 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2121 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V2403C Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "RKP-A110 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "RKS-G4000 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-3201 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-3201 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-720 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-1100 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3150W Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V3400 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3070W Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-682C Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2101 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3120W Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3070W Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-681C Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DRP-C100 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DRP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2121 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2120 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3150 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V2201 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3150W Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-720 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V2406C Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-820E Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "RKP-A110 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "RKS-G4000 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "RKP-C220 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "RKS-G4000 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3120 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-820E Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "RKP-C110 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "RKS-G4000 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V2406C Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2070 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-681C Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2120 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "BXP-A100 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "BXP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V3400 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DRP-A100 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DRP-A100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "BXP-A101 Serie sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "BXP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2070 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V2403C Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DRP-C100 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DRP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "RKP-C110 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "RKS-G4000 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-820C Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3150 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-7400 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-820C Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3120W Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V3200 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "V3200 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "V2201 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3100 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DRP-A100 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DRP-A100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-680 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EXPC-F2120W Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-7400 Series sur Windows 10 ou Windows 11 versions ant\u00e9rieures \u00e0 v1.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-680 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "DA-681A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "BXP-A101 Series sur Windows 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "BXP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "EXPC-F2150W Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MC-1200 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "MC-1100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-3100 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "RKP-C220 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "RKS-G4000 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MPC-2101 Series sur Window 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "BXP-C100 Series sur Windows 7 versions ant\u00e9rieures \u00e0 v1.4.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "BXP-C100 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-4483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4483"
}
],
"initial_release_date": "2026-04-08T00:00:00",
"last_revision_date": "2026-04-08T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0405",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Moxa. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-04-08",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-254811",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-254811-cve-2026-4483-exposed-ioctl-with-insufficient-access-control-vulnerability-in-the-utility-for-x86-computers"
}
]
}
CERTFR-2026-AVI-0252
Vulnerability from certfr_avis - Published: 2026-03-09 - Updated: 2026-03-09
De multiples vulnérabilités ont été découvertes dans les produits Moxa. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
L'éditeur a fourni certaines recommandations afin de limiter les attaques potentielles de certaines d'entre elles.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | DA-682C Series | DA-682C Series sans la version v1.6 du BIOS | ||
| Moxa | DA-820C Series | DA-820E Series | ||
| Moxa | DA-820C Series | DA-820C Series sans la version v1.3 du BIOS |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "DA-682C Series sans la version v1.6 du BIOS",
"product": {
"name": "DA-682C Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-820E Series",
"product": {
"name": "DA-820C Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "DA-820C Series sans la version v1.3 du BIOS",
"product": {
"name": "DA-820C Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2022-30944",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30944"
},
{
"name": "CVE-2022-30601",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30601"
},
{
"name": "CVE-2020-8749",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8749"
},
{
"name": "CVE-2022-43505",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43505"
},
{
"name": "CVE-2020-8747",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8747"
},
{
"name": "CVE-2022-28697",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28697"
},
{
"name": "CVE-2020-8752",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8752"
}
],
"initial_release_date": "2026-03-09T00:00:00",
"last_revision_date": "2026-03-09T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0252",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-03-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nL\u0027\u00e9diteur a fourni certaines recommandations afin de limiter les attaques potentielles de certaines d\u0027entre elles.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-03-09",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa mpsa-256821",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-256821-security-enhancement-intel%C2%AE-bios-firmware-dos-(intel-sa-00813)"
},
{
"published_at": "2026-03-09",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa mpsa-256823",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-256823-security-enhancement-intel%C2%AE-active-management-technology-(amt)-multiple-vulnerabilities-(intel-sa-00709)"
},
{
"published_at": "2026-03-09",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa mpsa-256822",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-256822-security-enhancement-intel%C2%AE-converged-security-management-engine-(csme)-active-management-technology-(amt)"
}
]
}
CERTFR-2026-AVI-0125
Vulnerability from certfr_avis - Published: 2026-02-06 - Updated: 2026-02-06
De multiples vulnérabilités ont été découvertes dans les produits Moxa. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un déni de service.
L'éditeur, dans son bulletin de sécurité, fournit des recommandations de diminution des risques associés pour les produits V2406C WL Models.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | N/A | V1200 Series versions antérieures ou égales à v1.2.0 sans le correctif de sécurité 5.10.234-cip57-rt25-moxa9-1+deb11u2 | ||
| Moxa | UC-1200A Series | UC-1200A Series versions antérieures ou égales à v1.4 sans le correctif de sécurité 5.10.234-cip57-rt25-moxa9-1+deb11u2 | ||
| Moxa | N/A | UC-8200 Series versions antérieures ou égales à v1.4 sans le correctif de sécurité 5.10.234-cip57-rt25-moxa9-1+deb11u2 | ||
| Moxa | UC-2200A Series | UC-2200A Series versions antérieures ou égales à v1.4 sans le correctif de sécurité 5.10.234-cip57-rt25-moxa9-1+deb11u2 | ||
| Moxa | N/A | UC-4400A Series versions antérieures ou égales à v1.4 sans le correctif de sécurité 5.10.234-cip57-rt25-moxa9-1+deb11u2 | ||
| Moxa | N/A | UC-3400A Series versions antérieures ou égales à v1.4 sans le correctif de sécurité 5.10.234-cip57-rt25-moxa9-1+deb11u2 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "V1200 Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v1.2.0 sans le correctif de s\u00e9curit\u00e9 5.10.234-cip57-rt25-moxa9-1+deb11u2",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "UC-1200A Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v1.4 sans le correctif de s\u00e9curit\u00e9 5.10.234-cip57-rt25-moxa9-1+deb11u2 ",
"product": {
"name": "UC-1200A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "UC-8200 Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v1.4 sans le correctif de s\u00e9curit\u00e9 5.10.234-cip57-rt25-moxa9-1+deb11u2 ",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "UC-2200A Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v1.4 sans le correctif de s\u00e9curit\u00e9 5.10.234-cip57-rt25-moxa9-1+deb11u2 ",
"product": {
"name": "UC-2200A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "UC-4400A Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v1.4 sans le correctif de s\u00e9curit\u00e9 5.10.234-cip57-rt25-moxa9-1+deb11u2 ",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "UC-3400A Series versions ant\u00e9rieures ou \u00e9gales \u00e0 v1.4 sans le correctif de s\u00e9curit\u00e9 5.10.234-cip57-rt25-moxa9-1+deb11u2 ",
"product": {
"name": "N/A",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-0715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0715"
},
{
"name": "CVE-2026-0714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0714"
}
],
"initial_release_date": "2026-02-06T00:00:00",
"last_revision_date": "2026-02-06T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0125",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-02-06T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\u003c/br\u003e\nL\u0027\u00e9diteur, dans son bulletin de s\u00e9curit\u00e9, fournit des recommandations de diminution des risques associ\u00e9s pour les produits V2406C WL Models. ",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-02-06",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-255121",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers"
}
]
}
CERTFR-2026-AVI-0116
Vulnerability from certfr_avis - Published: 2026-02-04 - Updated: 2026-02-04
Une vulnérabilité a été découverte dans les produits Moxa. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | TN-5500A Series | TN-5500A Series versions antérieures ou égales à 4.1 sans le correctif de sécurité v3.13.255 | ||
| Moxa | TN-G6500 Series | TN-G6500 Series versions antérieures ou égales à 5.5 sans le correctif de sécurité v5.5.255 | ||
| Moxa | TN-G4500 Series | TN-G4500 Series versions antérieures ou égales à 5.5 sans le correctif de sécurité v5.5.255 | ||
| Moxa | TN-4500A Series | TN-4500A Series versions antérieures ou égales à 4.1 sans le correctif de sécurité v3.13.255 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "TN-5500A Series versions ant\u00e9rieures ou \u00e9gales \u00e0 4.1 sans le correctif de s\u00e9curit\u00e9 v3.13.255",
"product": {
"name": "TN-5500A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "TN-G6500 Series versions ant\u00e9rieures ou \u00e9gales \u00e0 5.5 sans le correctif de s\u00e9curit\u00e9 v5.5.255",
"product": {
"name": "TN-G6500 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "TN-G4500 Series versions ant\u00e9rieures ou \u00e9gales \u00e0 5.5 sans le correctif de s\u00e9curit\u00e9 v5.5.255",
"product": {
"name": "TN-G4500 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "TN-4500A Series versions ant\u00e9rieures ou \u00e9gales \u00e0 4.1 sans le correctif de s\u00e9curit\u00e9 v3.13.255",
"product": {
"name": "TN-4500A Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-12297",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12297"
}
],
"initial_release_date": "2026-02-04T00:00:00",
"last_revision_date": "2026-02-04T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0116",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-02-04T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Moxa. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-02-04",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-241409",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241409-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-ethernet-switches"
}
]
}