Skip to content
OpenAdvisories
High · 7.5 CVE-2026-111461 EUVD-2026-110620GHSA-62qv-rfwm-xjwp

SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by Moxa

Description

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.

Affected products

VendorProductAffectedFixed
Moxa OnCell G3150A-LTE Series 1.0.0 —

References