Skip to content
OpenAdvisories
High · 7.7 CVE-2026-111460 EUVD-2026-110618GHSA-hpv3-4h37-hf99

Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Moxa

Description

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

Affected products

VendorProductAffectedFixed
Moxa OnCell G3150A-LTE Series 1.0.0 —

References