Moxa vulnerabilities
137 published CVEs name Moxa among the affected products.
- Published CVEs
- 137
- Last 12 months
- 23
- Critical
- 25
- Known exploited
- 0
Critical 25High 66Medium 41Low 4Not scored 1
CVEs per yearBy the year they were published
- 201712
- 20188
- 20194
- 20207
- 20216
- 20229
- 202338
- 202415
- 202519
- 202619
Newest CVEs
- CVE-2026-111548
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker…
Moxa · NPort W2150A-W4/W2250A-W4 Series
Medium5.3 - CVE-2026-111461
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
Moxa · OnCell G3150A-LTE Series
High7.5 - CVE-2026-111460
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
Moxa · OnCell G3150A-LTE Series
High7.7 - CVE-2026-111459
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
Moxa · Moxa Remote Connect Suite (MRC Client)
High7.6 - CVE-2026-109813
Shared Hard-coded Root CA Private Key
Moxa · AIG-302 Series
High8.6 - CVE-2026-109812
Missing Authorization on Secret Endpoints
Moxa · AIG-302 Series
Medium6.9 - CVE-2026-86326
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic…
Moxa · MGate MB3170 Series
High8.6 - CVE-2026-86325
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length…
Moxa · MGate MB3170 Series
Critical9.4 - CVE-2026-15579
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login…
Moxa · TN-4500B Series
High8.8 - CVE-2026-10831
Improper Authorization of Break Signal Commands in Devices
Moxa · NPort 6000 Series
Medium6.9
Products with the most CVEs
Most common weaknesses
- CWE-78 OS command injection13
- CWE-200 Exposure of sensitive information8
- CWE-319 Cleartext transmission of sensitive information8
- CWE-77 Command injection8
- CWE-79 Cross-site scripting (XSS)8
- CWE-798 Hard-coded credentials7
- CWE-22 Path traversal6
- CWE-787 Out-of-bounds write6
- CWE-121 Stack-based buffer overflow5
- CWE-250 5