Moxa

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-3336 1Moxa 1Tn 5900 Firmware Jun 17, 2026 Jul 5, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web l...Show more TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users. Show less
CVE-2023-33236 1Moxa 1Mxsecurity Jun 17, 2026 May 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based AP...Show more MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs. Show less
CVE-2023-33235 1Moxa 1Mxsecurity Jun 17, 2026 May 22, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The atta...Show more MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code. Show less
CVE-2023-28697 1Moxa 1Miineport E1 Firmware Jun 17, 2026 Apr 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service.
CVE-2023-1257 1Moxa 54Uc 2101 Lx Firmware Uc 2102 Lx FirmwareUc 2102 T Lx Firmware+51 more Jun 17, 2026 Mar 7, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the term...Show more An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.Show less
CVE-2022-41313 1Moxa 2Sds 3008 T Firmware Sds 3008 Firmware Jun 17, 2026 Feb 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution....Show more A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="switch_contact"Show less
CVE-2022-41312 1Moxa 2Sds 3008 T Firmware Sds 3008 Firmware Jun 17, 2026 Feb 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution....Show more A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="Switch Description", name "switch_description"Show less
CVE-2022-41311 1Moxa 2Sds 3008 T Firmware Sds 3008 Firmware Jun 17, 2026 Feb 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution....Show more A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="webLocationMessage_text" name="webLocationMessage_text"Show less
CVE-2022-40693 1Moxa 2Sds 3008 T Firmware Sds 3008 Firmware Jun 17, 2026 Feb 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive inform...Show more A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.Show less
CVE-2022-40691 1Moxa 2Sds 3008 T Firmware Sds 3008 Firmware Jun 17, 2026 Feb 7, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive informati...Show more An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2022-40224 1Moxa 2Sds 3008 T Firmware Sds 3008 Firmware Jun 17, 2026 Feb 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send...Show more A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2022-3086 1Moxa 50Uc 2101 Lx Firmware Uc 2102 Lx FirmwareUc 2104 Lx Firmware+47 more Jun 17, 2026 Dec 2, 2022 N/A· v4 7.6 HIGH· v3 N/A· v2 Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacke...Show more Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code. Show less
CVE-2022-3088 1Moxa 64Aig 301 Ap Azu Lx Firmware Aig 301 Azu Lx FirmwareAig 301 Cn Azu Lx Firmware+61 more Jun 17, 2026 Nov 28, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Imag...Show more UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.Show less
CVE-2022-2044 1Moxa 1Nport 5110 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 8.2 HIGH· v3 N/A· v2 MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or potentially bricking the device.
CVE-2022-2043 1Moxa 1Nport 5110 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive.
CVE-2022-27048 1Moxa 20Mgate Mb3170 M Sc T Firmware Mgate Mb3170 M Sc FirmwareMgate Mb3170 M St T Firmware+17 more Jun 17, 2026 Apr 15, 2022 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Seri...Show more A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.Show less
CVE-2021-40392 1Moxa 1Mxview Jun 17, 2026 Apr 14, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic t...Show more An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to exploit this vulnerability.Show less
CVE-2021-40390 1Moxa 1Mxview Jun 17, 2026 Apr 14, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to tr...Show more An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2021-32976 1Moxa 4Nport Iaw5150a 12i/o Firmware Nport Iaw5150a 6i/o FirmwareNport Iaw5250a 12i/o Firmware+1 more Jun 17, 2026 Apr 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.
CVE-2021-32974 1Moxa 4Nport Iaw5150a 12i/o Firmware Nport Iaw5150a 6i/o FirmwareNport Iaw5250a 12i/o Firmware+1 more Jun 17, 2026 Apr 1, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands.

Previous 1 234 5...15 Next