Vulnerabilities in Moxa

129 results
Vexday analysis

Com 119 CVEs catalogadas, o portfólio da Moxa apresenta taxa de exploração ativa abaixo da média geral do catálogo CISA KEV, sem registros confirmados de exploração em produção até o momento. No entanto, a ausência de PoCs públicas conhecidas não elimina o risco: o tipo de falha mais recorrente é CWE-78 (OS Command Injection), categoria historicamente atrativa para atacantes em ambientes de tecnologia operacional e redes industriais. A CVE mais perigosa em evidência hoje é CVE-2022-40224, com EPSS de 0,6469 — valor que indica probabilidade relevante de exploração próxima e merece atenção prioritária nas esteiras de patch. As 17 vulnerabilidades de severidade crítica e as 8 CVEs surgidas nos últimos 90 dias reforçam a necessidade de monitoramento contínuo para equipes que operam equipamentos Moxa em ambientes críticos.

CVE-2024-7695HIGHOut-of-bounds Write VulnerabilityEPSS 0.7%CVE-2023-34216HIGHSecond Order Command-injection Vulnerability in the Key-delete FunctionEPSS 0.7%CVE-2018-18394—Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.EPSS 0.7%CVE-2022-2044HIGHMOXA NPort 5110 Out-of-bounds WriteEPSS 0.7%CVE-2023-39980HIGHMXsecurity Authenticated Information Disclosure Due to SQL InjectionEPSS 0.7%CVE-2021-4161CRITICALICSA-21-357-01 Moxa MGate Protocol GatewaysEPSS 0.7%CVE-2024-1220HIGHNPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow VulnerabilityEPSS 0.7%CVE-2025-6893CRITICALAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in brokEPSS 0.7%CVE-2022-40693MEDIUMA cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. AEPSS 0.6%CVE-2023-33237HIGHAuthentication Bypass Without Administrator PrivilegeEPSS 0.6%CVE-2023-39983MEDIUMMXsecurity Register Database PollutionEPSS 0.6%CVE-2023-3336MEDIUMTN-5900 Series User Enumeration VulnerabilityEPSS 0.6%CVE-2025-6950CRITICALAn Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hEPSS 0.6%CVE-2021-40392MEDIUMAn information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead tEPSS 0.6%CVE-2025-6894MEDIUMAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the EPSS 0.6%CVE-2024-6786MEDIUMMXview One Series vulnerable to Path TraversalEPSS 0.6%CVE-2024-0387MEDIUMEDS-4000/G4000 Series IP Forwarding VulnerabilityEPSS 0.5%CVE-2016-8718HIGHAn exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point EPSS 0.5%CVE-2025-0415CRITICALCommand Injection in NTP SettingEPSS 0.5%CVE-2025-6949CRITICALAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical autEPSS 0.5%