Vulnerabilidades em Moxa

137 resultados
Análise Vexday

Com 119 CVEs catalogadas, o portfólio da Moxa apresenta taxa de exploração ativa abaixo da média geral do catálogo CISA KEV, sem registros confirmados de exploração em produção até o momento. No entanto, a ausência de PoCs públicas conhecidas não elimina o risco: o tipo de falha mais recorrente é CWE-78 (OS Command Injection), categoria historicamente atrativa para atacantes em ambientes de tecnologia operacional e redes industriais. A CVE mais perigosa em evidência hoje é CVE-2022-40224, com EPSS de 0,6469 — valor que indica probabilidade relevante de exploração próxima e merece atenção prioritária nas esteiras de patch. As 17 vulnerabilidades de severidade crítica e as 8 CVEs surgidas nos últimos 90 dias reforçam a necessidade de monitoramento contínuo para equipes que operam equipamentos Moxa em ambientes críticos.

CVE-2023-4229MEDIUMioLogik 4000 Series: Session Headers Not ImplementedEPSS 0.4%CVE-2026-3868HIGHAn improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper vaEPSS 0.4%CVE-2023-4227MEDIUMioLogik 4000 Series: Existence of an Unauthorized ServiceEPSS 0.4%CVE-2024-4739MEDIUMMXsecurity License Generation Function DisclosureEPSS 0.4%CVE-2023-4228LOWioLogik 4000 Series: Session Cookies Attribute Not Set ProperlyEPSS 0.3%CVE-2025-1977HIGHThe NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authenEPSS 0.3%CVE-2026-111548MEDIUMA stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticateEPSS 0.3%CVE-2024-4641MEDIUMOnCell G3470A-LTE Series: Authenticated Format String ErrorsEPSS 0.3%CVE-2026-86325CRITICALA stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insuffEPSS 0.3%CVE-2025-1679MEDIUMCross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject maliciEPSS 0.3%CVE-2023-1257HIGHCVE-2023-1257EPSS 0.3%CVE-2023-4929MEDIUMNPort 5000 Series Firmware Improper Validation of Integrity Check VulnerabilityEPSS 0.3%CVE-2026-4483HIGHAn exposed IOCTL with an  insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial xEPSS 0.3%CVE-2025-0193MEDIUMStored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 SeriesEPSS 0.3%CVE-2026-10828MEDIUMA format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-WEPSS 0.3%CVE-2026-111460HIGHStatic HTTPS private key and CA private key in firmware in OnCell G3150A-LTE SeriesEPSS 0.3%CVE-2026-10831MEDIUMImproper Authorization of Break Signal Commands in DevicesEPSS 0.3%CVE-2024-4740MEDIUMMXsecurity Use of Hard-coded CredentialsEPSS 0.3%CVE-2025-15017HIGHA vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical accEPSS 0.3%CVE-2023-5962MEDIUMioLogik E1200 Series: Weak Cryptographic Algorithm VulnerabilityEPSS 0.3%