moxa

315 tracked vulnerabilities.

CVE-2026-3868 HIGH
Moxa EDR-8010 and EDR-G9010 Series - Unauthenticated Denial of Service via HTTPS Management Interface
Apr 27, 2026
EPSS 0.00
CVE-2026-3867 MEDIUM
Moxa EDR-8010 Series <3.23 - Info Disclosure
Apr 27, 2026
EPSS 0.00
CVE-2026-4483 HIGH
MxGeneralIo 1.0-1.3.9 and 1.4.0-1.4.9 - Exposed IOCTL with Insufficient Access Control
Apr 08, 2026
EPSS 0.00
CVE-2026-0715 MEDIUM
Moxa Industrial Linux Secure - Insufficiently Protected Credentials via Bootloader Password
Feb 05, 2026
CVSS 6.8
EPSS 0.00
CVE-2026-0714 MEDIUM
Moxa Industrial Linux 3 - Physical Attack
Feb 05, 2026
CVSS 6.8
EPSS 0.00
CVE-2025-2026 HIGH
NPort 6100-G2/6200-G2 Series - Code Injection
Dec 31, 2025
EPSS 0.00
CVE-2025-1977 HIGH
NPort 6100-G2/6200-G2 Series - Privilege Escalation
Dec 31, 2025
EPSS 0.00
CVE-2025-15017 HIGH
Serial Device Servers - Privilege Escalation
Dec 31, 2025
EPSS 0.00
CVE-2025-9315 MEDIUM
MXsecurity Series - Unauthenticated RCE
Dec 10, 2025
EPSS 0.00
CVE-2025-1680 NONE
Moxa Ethernet switches - Host Header Injection
Oct 23, 2025
EPSS 0.00
CVE-2025-1679 MEDIUM
Moxa TN-4500A, TN-5500A, TN-G4500, TN-G6500 Series - Authenticated Stored Cross-Site Scripting
Oct 23, 2025
EPSS 0.00
CVE-2025-6950 CRITICAL
Moxa EDR-G9010/EDR-8010/EDF-G1002-BP/TN-4900/NAT-102/NAT-108/OnCell G4302-LTE4 - Auth Bypass via Hard-coded JWT Secret
Oct 17, 2025
EPSS 0.00
CVE-2025-6949 CRITICAL
Moxa EDR-G9010/EDR-8010/EDF-G1002-BP/TN-4900/NAT-102/NAT-108/OnCell G4302-LTE4 - Privilege Escalation via API
Oct 17, 2025
EPSS 0.00
CVE-2025-6894 MEDIUM
Moxa EDR-G9010/EDR-8010/EDF-G1002-BP/TN-4900/NAT-102/NAT-108/OnCell G4302-LTE4 - Privilege Escalation via API Bypass
Oct 17, 2025
EPSS 0.00
CVE-2025-6893 CRITICAL
Moxa EDR-G9010/EDR-8010/EDF-G1002-BP/TN-4900/NAT-102/NAT-108/OnCell G4302-LTE4 - Privilege Escalation via API Endpoint
Oct 17, 2025
EPSS 0.00
CVE-2025-6892 HIGH
Moxa EDR-G9010/EDR-8010/EDF-G1002-BP/TN-4900/NAT-102/NAT-108/OnCell G4302-LTE4 - Incorrect API Authorization
Oct 17, 2025
EPSS 0.00
CVE-2025-5191 HIGH
Moxa's industrial computers - Privilege Escalation
Aug 25, 2025
EPSS 0.00
CVE-2025-0676 HIGH
Moxa EDF-G1002-BP Series < 3.14 - Authenticated OS Command Injection via tcpdump
Apr 02, 2025
EPSS 0.01
CVE-2025-0415 CRITICAL
Moxa EDF-G1002-BP Series < 3.14 - Authenticated OS Command Injection via NTP Settings
Apr 02, 2025
EPSS 0.01
CVE-2025-0193 MEDIUM
MGate 5121/5122/5123 Series v1.0 - XSS
Jan 15, 2025
EPSS 0.00
CVE-2024-7695 HIGH
Multiple Switches - Buffer Overflow
Jan 29, 2025
CVSS 7.5
EPSS 0.00
CVE-2024-12297 CRITICAL
Moxa's Ethernet switch - Auth Bypass
Jan 15, 2025
EPSS 0.00
CVE-2024-9140 CRITICAL
Moxa TN-4900 Series < 3.13 - OS Command Injection
Jan 03, 2025
CVSS 9.8
EPSS 0.01
CVE-2024-9138 HIGH
Moxa EDR-810 Series < 5.12.37 - Authenticated Privilege Escalation via Hard-coded Credentials
Jan 03, 2025
CVSS 7.2
EPSS 0.00
CVE-2024-9404 HIGH
Moxa VPort 07-3 Series < 1.0 and EDS Series < 3.12 - Denial of Service via moxa_cmd Service
Dec 04, 2024
CVSS 7.5
EPSS 0.00