Moxa Security Vulnerabilities (CVEs)

This CVE describes a physical attack vulnerability in Moxa industrial computers where an attacker with invasive physical access can capture TPM commun...

This vulnerability allows attackers with physical access to Moxa industrial computers to access the bootloader menu using a device-unique password. Th...

MXsecurity software versions v1.1.0 and prior contain hard-coded credentials that could allow attackers to access and tamper with sensitive data. This...

This CVE describes a Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability in Moxa's MXview One and MXview One Central Manager series. Attac...

This vulnerability allows attackers with local access to read or modify configuration files containing cleartext credentials. This affects Moxa MXview...

OnCell G3470A-LTE Series devices with firmware v1.7.7 and earlier have a buffer overflow vulnerability due to missing bounds checking. An attacker cou...

CVE-2024-4638 is a command injection vulnerability in OnCell G3470A-LTE Series industrial cellular routers. Attackers can execute arbitrary commands b...

A stack-based buffer overflow vulnerability in the built-in web server of Moxa NPort W2150A/W2250A Series devices allows remote attackers to send craf...

A Cross-Site Request Forgery (CSRF) vulnerability in ioLogik E1200 Series firmware allows attackers to trick authenticated users into performing unint...

MXsecurity versions before v1.0.1 have an authentication bypass vulnerability that allows remote attackers to access device information without proper...

This vulnerability allows authenticated attackers to delete arbitrary files on affected TN-4900 and TN-5900 Series devices through command injection i...

This vulnerability allows remote attackers to execute arbitrary commands on TN-5900 Series devices due to insufficient input validation in the certifi...

This CVE describes a command injection vulnerability in Moxa TN-4900 and TN-5900 series industrial routers. Insufficient input validation in certifica...

This CVE describes a command injection vulnerability in TN-5900 Series firmware that allows remote code execution. Attackers can exploit insufficient ...

This vulnerability allows low-privileged users to execute restricted actions intended only for high-privileged users due to improper authentication in...

An attacker with physical access to Moxa UC Series devices can restart them, access the BIOS, modify boot parameters to gain terminal access, and then...

This vulnerability allows remote attackers to cause denial of service in Moxa SDS-3008 industrial switches by sending specially crafted HTTP headers. ...

CVE-2022-40693 is a cleartext transmission vulnerability in Moxa SDS-3008 industrial switches that allows attackers to intercept sensitive information...

This vulnerability in Moxa MGate protocol gateways allows attackers to perform man-in-the-middle attacks by intercepting and potentially modifying com...

CVE-2021-40392 is an information disclosure vulnerability in Moxa MXView network management software where unencrypted network traffic exposes sensiti...

Two buffer overflow vulnerabilities in the built-in web server of Moxa NPort IAW5000A-I/O Series devices allow remote attackers to cause denial-of-ser...

This vulnerability allows authenticated attackers to execute arbitrary operating system commands on affected MOXA devices via the /forms/web_importTFT...

CVE-2021-33823 is a denial-of-service vulnerability in MOXA Mgate MB3180 gateways where attackers can exhaust web service resources by flooding TCP SY...

CVE-2020-27185 allows attackers to intercept authentication data, device configurations, and other sensitive information transmitted in cleartext via ...

This vulnerability in Moxa NPort IA5000A Series serial device servers exposes all user passwords and sensitive data when exporting device configuratio...

This vulnerability allows attackers to cause a denial of service on Moxa VPort 06EC-2V Series IP cameras by sending a specially crafted LLDP packet. T...