Vendor
Moxa
137 known vulnerabilities.
Moxa at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 8 | 1 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 5 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 2 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 4 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 7 | 3 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 1 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 2 | 1 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 5 | 2 |
| Dec 2024 | 1 | 0 |
Most common weaknesses
Products
Latest advisories
-
High max 8.8
Linux Kernel (Dirty Frag): Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Administratorrechte zu erlangen.
first May 7, 2026 -
Low max 5.3WID-SEC-2026-4166 1 CVE
Moxa NPort Wireless Device Servers: Schwachstelle ermöglicht Denial of Service
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Moxa NPort Wireless Device Servers ausnutzen, um einen Denial of Service Angriff durchzuführen.
-
High max 8.8
Linux Kernel: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Zustand oder andere, nicht näher spezifizierte Auswirkungen zu erzielen.
first Apr 21, 2026 -
High max 8.6ICSA-26-293-03 2 CVEs
Moxa AIG-302 ThingsPro Edge
Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.
-
Medium max 5.9
SSH Protokoll: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle im SSH Protokoll ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
first Dec 18, 2023
137 results · Feed
-
Medium 5.3
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device ser…
-
High 7.5
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functio…
-
High 7.7
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerat…
-
High 7.6
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted…
-
High 8.6
Shared Hard-coded Root CA Private Key
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentia…
-
Medium 6.9
Missing Authorization on Secret Endpoints
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive info…
-
High 8.6
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does n…
-
Critical 9.4
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerabilit…
-
High 8.8
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the user…
-
Medium 6.9
Improper Authorization of Break Signal Commands in Devices
A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal comm…
-
High 8.6
A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earl…
-
Medium 6.9
A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPo…
-
High 7.1
Improper JSON Input Validation in WebSocket API Leads to Denial of Service
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an …
-
High 7.0
A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industria…
-
High 8.7
An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. B…
-
Medium 6.0
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownersh…
-
High 7.0
An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, fo…
-
High 7.0
Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provid…
-
High 7.0
A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption …
-
High 7.0
A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attac…
-
High 7.1CVE-2025-2026 Public exploit
The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attack…
-
High 7.7
The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) …
-
Medium 6.3
Unauthenticated Device Registration Vulnerability in MXsecurity Series
An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecurity Series. An unauthenticated remote attacker can exploit this vulnerability by …
-
None 0.0
An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switc…
-
Medium 4.8
Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative atta…
-
Critical 9.9
An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. T…
-
Critical 9.3
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and ro…
-
Medium 5.3
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and ro…
-
Critical 9.3
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and ro…
-
High 8.7
An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw …
-
High 7.3
Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)
An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers (Windows). Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malici…
-
High 8.6
Commend Injection Leading to Privilege Escalation
This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privileg…
-
Critical 9.2
Command Injection in NTP Setting
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or …
-
High 7.5
Out-of-bounds Write Vulnerability
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability co…
-
Medium 5.2
Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 Series
A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the "Login Message" functionality. An authenticated attacker with administrati…
-
Critical 9.2
Frontend Authorization Logic Disclosure Vulnerability
Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. T…
-
Critical 9.8
Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-…
-
High 7.2
Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-leve…
-
High 7.5
Denial-of-Service Vulnerability
This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxa_cmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant…
-
Medium 5.3
MXsecurity Use of Hard-coded Credentials
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.