Vulnerabilities in MOXA

128 results
Vexday analysis

Moxa apresenta 9 vulnerabilidades conhecidas, com 2 classificadas como críticas, mas nenhuma sob exploração ativa confirmada no Vexday. A fraqueza dominante identificada é estouro de buffer (CWE-787), padrão em componentes embarcados e de controle industrial. Não há registros de publicações recentes (últimos 90 dias), indicando um risco estável, porém requer atenção contínua aos sistemas legados ainda em operação.

CVE-2026-0715HIGHMoxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An EPSS 0.2%CVE-2023-5035LOWCookie Without Secure FlagEPSS 0.2%CVE-2022-3088HIGHUC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v EPSS 0.2%CVE-2025-1680NONEAn acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attEPSS 0.2%CVE-2025-5191HIGHUnquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)EPSS 0.1%CVE-2026-0714HIGHA physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial LiEPSS 0.1%CVE-2024-6785MEDIUMMXview One and MXview One Central Manager Series store cleartext credentials in a local fileEPSS 0.1%CVE-2026-9266HIGHA Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and contrEPSS 0.1%