# cve.now: Moxa

The newest entries naming Moxa as an affected vendor (up to 200), of 137 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-111548](https://cve.now/CVE-2026-111548.md): A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. (CVSS 5.3)
- [CVE-2026-111461](https://cve.now/CVE-2026-111461.md): SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series (CVSS 7.5)
- [CVE-2026-111460](https://cve.now/CVE-2026-111460.md): Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series (CVSS 7.7)
- [CVE-2026-111459](https://cve.now/CVE-2026-111459.md): Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) (CVSS 7.6)
- [CVE-2026-109813](https://cve.now/CVE-2026-109813.md): Shared Hard-coded Root CA Private Key (CVSS 8.6)
- [CVE-2026-109812](https://cve.now/CVE-2026-109812.md): Missing Authorization on Secret Endpoints (CVSS 6.9)
- [CVE-2026-86326](https://cve.now/CVE-2026-86326.md): An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify th (CVSS 8.6)
- [CVE-2026-86325](https://cve.now/CVE-2026-86325.md): A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. (CVSS 9.4)
- [CVE-2026-15579](https://cve.now/CVE-2026-15579.md): An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length dur (CVSS 8.8)
- [CVE-2026-10831](https://cve.now/CVE-2026-10831.md): Improper Authorization of Break Signal Commands in Devices (CVSS 6.9)
- [CVE-2026-10829](https://cve.now/CVE-2026-10829.md): A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. (CVSS 8.6)
- [CVE-2026-10828](https://cve.now/CVE-2026-10828.md): A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W (CVSS 6.9)
- [CVE-2026-10825](https://cve.now/CVE-2026-10825.md): Improper JSON Input Validation in WebSocket API Leads to Denial of Service (CVSS 7.1)
- [CVE-2026-9266](https://cve.now/CVE-2026-9266.md): A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and contr (CVSS 7.0)
- [CVE-2026-3868](https://cve.now/CVE-2026-3868.md): An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. (CVSS 8.7)
- [CVE-2026-3867](https://cve.now/CVE-2026-3867.md): An improper ownership management vulnerability has been identified in Moxa’s Secure Router. (CVSS 6.0)
- [CVE-2026-4483](https://cve.now/CVE-2026-4483.md): An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x (CVSS 7.0)
- [CVE-2026-0715](https://cve.now/CVE-2026-0715.md): Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. (CVSS 7.0)
- [CVE-2026-0714](https://cve.now/CVE-2026-0714.md): A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Li (CVSS 7.0)
- [CVE-2025-15017](https://cve.now/CVE-2025-15017.md): A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. (CVSS 7.0)
- [CVE-2025-2026](https://cve.now/CVE-2025-2026.md): The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null (CVSS 7.1)
- [CVE-2025-1977](https://cve.now/CVE-2025-1977.md): The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authen (CVSS 7.7)
- [CVE-2025-9315](https://cve.now/CVE-2025-9315.md): Unauthenticated Device Registration Vulnerability in MXsecurity Series (CVSS 6.3)
- [CVE-2025-1680](https://cve.now/CVE-2025-1680.md): An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows att (CVSS 0.0)
- [CVE-2025-1679](https://cve.now/CVE-2025-1679.md): Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malici (CVSS 4.8)
- [CVE-2025-6950](https://cve.now/CVE-2025-6950.md): An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 9.9)
- [CVE-2025-6949](https://cve.now/CVE-2025-6949.md): An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 9.3)
- [CVE-2025-6894](https://cve.now/CVE-2025-6894.md): An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 5.3)
- [CVE-2025-6893](https://cve.now/CVE-2025-6893.md): An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 9.3)
- [CVE-2025-6892](https://cve.now/CVE-2025-6892.md): An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 8.7)
- [CVE-2025-5191](https://cve.now/CVE-2025-5191.md): Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows) (CVSS 7.3)
- [CVE-2025-0676](https://cve.now/CVE-2025-0676.md): Commend Injection Leading to Privilege Escalation (CVSS 8.6)
- [CVE-2025-0415](https://cve.now/CVE-2025-0415.md): Command Injection in NTP Setting (CVSS 9.2)
- [CVE-2024-7695](https://cve.now/CVE-2024-7695.md): Out-of-bounds Write Vulnerability (CVSS 7.5)
- [CVE-2025-0193](https://cve.now/CVE-2025-0193.md): Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 Series (CVSS 5.2)
- [CVE-2024-12297](https://cve.now/CVE-2024-12297.md): Frontend Authorization Logic Disclosure Vulnerability (CVSS 9.2)
- [CVE-2024-9140](https://cve.now/CVE-2024-9140.md): Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. (CVSS 9.3)
- [CVE-2024-9138](https://cve.now/CVE-2024-9138.md): Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances (CVSS 8.6)
- [CVE-2024-9404](https://cve.now/CVE-2024-9404.md): Denial-of-Service Vulnerability (CVSS 6.9)
- [CVE-2024-4740](https://cve.now/CVE-2024-4740.md): MXsecurity Use of Hard-coded Credentials (CVSS 5.3)
- [CVE-2024-4739](https://cve.now/CVE-2024-4739.md): MXsecurity License Generation Function Disclosure (CVSS 5.3)
- [CVE-2024-9139](https://cve.now/CVE-2024-9139.md): OS Command Injection in Restricted Command (CVSS 8.6)
- [CVE-2024-9137](https://cve.now/CVE-2024-9137.md): Moxa Service Missing Authentication for Critical Function (CVSS 8.8)
- [CVE-2024-6787](https://cve.now/CVE-2024-6787.md): MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition (CVSS 6.0)
- [CVE-2024-6786](https://cve.now/CVE-2024-6786.md): MXview One Series vulnerable to Path Traversal (CVSS 6.0)
- [CVE-2024-6785](https://cve.now/CVE-2024-6785.md): MXview One and MXview One Central Manager Series store cleartext credentials in a local file (CVSS 6.8)
- [CVE-2024-4641](https://cve.now/CVE-2024-4641.md): OnCell G3470A-LTE Series: Authenticated Format String Errors (CVSS 6.3)
- [CVE-2024-4640](https://cve.now/CVE-2024-4640.md): OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail (CVSS 7.1)
- [CVE-2024-4639](https://cve.now/CVE-2024-4639.md): OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec (CVSS 7.1)
- [CVE-2024-4638](https://cve.now/CVE-2024-4638.md): OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey (CVSS 7.1)
- [CVE-2024-3576](https://cve.now/CVE-2024-3576.md): NPort 5100A Series Store XSS Vulnerability (CVSS 8.3)
- [CVE-2024-1220](https://cve.now/CVE-2024-1220.md): NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability (CVSS 8.2)
- [CVE-2024-0387](https://cve.now/CVE-2024-0387.md): EDS-4000/G4000 Series IP Forwarding Vulnerability (CVSS 6.5)
- [CVE-2023-6094](https://cve.now/CVE-2023-6094.md): OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials (CVSS 5.3)
- [CVE-2023-6093](https://cve.now/CVE-2023-6093.md): OnCell G3150A-LTE Series: Clickjacking Vulnerability (CVSS 5.3)
- [CVE-2023-5962](https://cve.now/CVE-2023-5962.md): ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability (CVSS 6.5)
- [CVE-2023-5961](https://cve.now/CVE-2023-5961.md): ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability (CVSS 8.8)
- [CVE-2023-5035](https://cve.now/CVE-2023-5035.md): Cookie Without Secure Flag (CVSS 3.1)
- [CVE-2023-4217](https://cve.now/CVE-2023-4217.md): Session cookies attribute not set properly (CVSS 3.1)
- [CVE-2023-5627](https://cve.now/CVE-2023-5627.md): Incorrect Implementation of Authentication Algorithm Vulnerability (CVSS 7.5)
- [CVE-2023-4452](https://cve.now/CVE-2023-4452.md): Web Server Buffer Overflow Vulnerability (CVSS 6.5)
- [CVE-2023-4929](https://cve.now/CVE-2023-4929.md): NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability (CVSS 6.5)
- [CVE-2023-39983](https://cve.now/CVE-2023-39983.md): MXsecurity Register Database Pollution (CVSS 5.3)
- [CVE-2023-39982](https://cve.now/CVE-2023-39982.md): MXsecurity Hardcoded Credential (CVSS 7.5)
- [CVE-2023-39981](https://cve.now/CVE-2023-39981.md): MXsecurity Device Information Disclosure (CVSS 7.5)
- [CVE-2023-39980](https://cve.now/CVE-2023-39980.md): MXsecurity Authenticated Information Disclosure Due to SQL Injection (CVSS 7.1)
- [CVE-2023-39979](https://cve.now/CVE-2023-39979.md): MXsecurity Authentication Bypass (CVSS 9.8)
- [CVE-2023-4230](https://cve.now/CVE-2023-4230.md): ioLogik 4000 Series: Server Banner Information Disclosure (CVSS 5.3)
- [CVE-2023-4229](https://cve.now/CVE-2023-4229.md): ioLogik 4000 Series: Session Headers Not Implemented (CVSS 4.3)
- [CVE-2023-4228](https://cve.now/CVE-2023-4228.md): ioLogik 4000 Series: Session Cookies Attribute Not Set Properly (CVSS 3.1)
- [CVE-2023-4227](https://cve.now/CVE-2023-4227.md): ioLogik 4000 Series: Existence of an Unauthorized Service (CVSS 5.3)
- [CVE-2023-34217](https://cve.now/CVE-2023-34217.md): Second Order Command-injection Vulnerability in the Certificate-delete Function (CVSS 8.1)
- [CVE-2023-34216](https://cve.now/CVE-2023-34216.md): Second Order Command-injection Vulnerability in the Key-delete Function (CVSS 8.1)
- [CVE-2023-34215](https://cve.now/CVE-2023-34215.md): Second Order Command-injection Vulnerability in the Certificate-generation Function (CVSS 7.2)
- [CVE-2023-34214](https://cve.now/CVE-2023-34214.md): Second Order Command-injection Vulnerability in the Certificate-generation Function (CVSS 7.2)
- [CVE-2023-34213](https://cve.now/CVE-2023-34213.md): Second Order Command-injection Vulnerability in the Key-generation Function (CVSS 8.8)
- [CVE-2023-33239](https://cve.now/CVE-2023-33239.md): Second Order Command-injection Vulnerability in the Key-generation Function (CVSS 8.8)
- [CVE-2023-33238](https://cve.now/CVE-2023-33238.md): Command-injection Vulnerability in Certificate Management (CVSS 7.2)
- [CVE-2023-33237](https://cve.now/CVE-2023-33237.md): Authentication Bypass Without Administrator Privilege (CVSS 8.8)
- [CVE-2023-4204](https://cve.now/CVE-2023-4204.md): NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability (CVSS 5.4)
- [CVE-2023-3336](https://cve.now/CVE-2023-3336.md): TN-5900 Series User Enumeration Vulnerability (CVSS 5.3)
- [CVE-2023-33236](https://cve.now/CVE-2023-33236.md): MXsecurity Hardcoded Credential Vulnerability (CVSS 9.8)
- [CVE-2023-33235](https://cve.now/CVE-2023-33235.md): MXsecurity Command Injection Vulnerability (CVSS 7.2)
- [CVE-2023-28697](https://cve.now/CVE-2023-28697.md): Moxa MiiNePort E1 - Broken Access Control (CVSS 9.8)
- [CVE-2023-1257](https://cve.now/CVE-2023-1257.md): CVE-2023-1257 (CVSS 7.6)
- [CVE-2022-40693](https://cve.now/CVE-2022-40693.md): A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. (CVSS 5.9)
- [CVE-2022-40224](https://cve.now/CVE-2022-40224.md): A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. (CVSS 5.3)
- [CVE-2022-41313](https://cve.now/CVE-2022-41313.md): A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2 (CVSS 4.3)
- [CVE-2022-41312](https://cve.now/CVE-2022-41312.md): A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2 (CVSS 4.3)
- [CVE-2022-41311](https://cve.now/CVE-2022-41311.md): A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2 (CVSS 4.3)
- [CVE-2022-40691](https://cve.now/CVE-2022-40691.md): An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. (CVSS 5.3)
- [CVE-2022-3088](https://cve.now/CVE-2022-3088.md): UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v (CVSS 7.8)
- [CVE-2022-2043](https://cve.now/CVE-2022-2043.md): MOXA NPort 5110 Out-of-bounds Write (CVSS 7.5)
- [CVE-2022-2044](https://cve.now/CVE-2022-2044.md): MOXA NPort 5110 Out-of-bounds Write (CVSS 8.2)
- [CVE-2021-40392](https://cve.now/CVE-2021-40392.md): An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. (CVSS 5.3)
- [CVE-2021-40390](https://cve.now/CVE-2021-40390.md): An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. (CVSS 10.0)
- [CVE-2021-32976](https://cve.now/CVE-2021-32976.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow (CVSS 9.8)
- [CVE-2021-32974](https://cve.now/CVE-2021-32974.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (CVSS 9.8)
- [CVE-2021-32970](https://cve.now/CVE-2021-32970.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (CVSS 7.5)
- [CVE-2021-32968](https://cve.now/CVE-2021-32968.md): Moxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer Overflow (CVSS 7.5)
- [CVE-2021-4161](https://cve.now/CVE-2021-4161.md): ICSA-21-357-01 Moxa MGate Protocol Gateways (CVSS 9.8)
- [CVE-2021-38460](https://cve.now/CVE-2021-38460.md): Moxa MXview Network Management Software (CVSS 7.5)
- [CVE-2021-38458](https://cve.now/CVE-2021-38458.md): Moxa MXview Network Management Software (CVSS 9.8)
- [CVE-2021-38454](https://cve.now/CVE-2021-38454.md): Moxa MXview Network Management Software (CVSS 10.0)
- [CVE-2021-38456](https://cve.now/CVE-2021-38456.md): Moxa MXview Network Management Software (CVSS 9.8)
- [CVE-2021-38452](https://cve.now/CVE-2021-38452.md): Moxa MXview Network Management Software (CVSS 7.5)
- [CVE-2020-25196](https://cve.now/CVE-2020-25196.md): MOXA NPort IAW5000A-I/O Series (CVSS 9.8)
- [CVE-2020-25153](https://cve.now/CVE-2020-25153.md): MOXA NPort IAW5000A-I/O Series (CVSS 9.8)
- [CVE-2020-25192](https://cve.now/CVE-2020-25192.md): MOXA NPort IAW5000A-I/O Series (CVSS 5.3)
- [CVE-2020-25198](https://cve.now/CVE-2020-25198.md): MOXA NPort IAW5000A-I/O Series (CVSS 8.8)
- [CVE-2020-25194](https://cve.now/CVE-2020-25194.md): MOXA NPort IAW5000A-I/O Series (CVSS 8.8)
- [CVE-2020-25190](https://cve.now/CVE-2020-25190.md): MOXA NPort IAW5000A-I/O Series (CVSS 7.5)
- [CVE-2020-8858](https://cve.now/CVE-2020-8858.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4. (CVSS 8.8)
- [CVE-2019-6526](https://cve.now/CVE-2019-6526.md): Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A se (no CVSS)
- [CVE-2015-6458](https://cve.now/CVE-2015-6458.md): Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. (no CVSS)
- [CVE-2015-6457](https://cve.now/CVE-2015-6457.md): Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. (no CVSS)
- [CVE-2016-5819](https://cve.now/CVE-2016-5819.md): Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflec (no CVSS)
- [CVE-2018-18396](https://cve.now/CVE-2018-18396.md): Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-18395](https://cve.now/CVE-2018-18395.md): Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-18394](https://cve.now/CVE-2018-18394.md): Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-18393](https://cve.now/CVE-2018-18393.md): Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-18392](https://cve.now/CVE-2018-18392.md): Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-18391](https://cve.now/CVE-2018-18391.md): User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-18390](https://cve.now/CVE-2018-18390.md): User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. (no CVSS)
- [CVE-2018-10632](https://cve.now/CVE-2018-10632.md): In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not res (no CVSS)
- [CVE-2016-8721](https://cve.now/CVE-2016-8721.md): An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Point (CVSS 9.1)
- [CVE-2016-8727](https://cve.now/CVE-2016-8727.md): An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point. (no CVSS)
- [CVE-2016-8726](https://cve.now/CVE-2016-8726.md): An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web\_runScript iw\_filename functionality of Moxa A (CVSS 7.5)
- [CVE-2016-8725](https://cve.now/CVE-2016-8725.md): An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point (CVSS 5.3)
- [CVE-2016-8724](https://cve.now/CVE-2016-8724.md): An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running (CVSS 5.3)
- [CVE-2016-8723](https://cve.now/CVE-2016-8723.md): An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware (CVSS 7.5)
- [CVE-2016-8722](https://cve.now/CVE-2016-8722.md): An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802 (CVSS 5.3)
- [CVE-2016-8720](https://cve.now/CVE-2016-8720.md): An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point r (CVSS 3.1)
- [CVE-2016-8712](https://cve.now/CVE-2016-8712.md): An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. (CVSS 5.9)
- [CVE-2016-8719](https://cve.now/CVE-2016-8719.md): An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Po (CVSS 7.5)
- [CVE-2016-8718](https://cve.now/CVE-2016-8718.md): An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point (CVSS 7.5)
- [CVE-2016-8716](https://cve.now/CVE-2016-8716.md): An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Acces (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/moxa
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.