Moxa vulnerabilities
137 CVEs and advisories name Moxa as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-5191Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)
- CVE-2025-0676Commend Injection Leading to Privilege Escalation
- CVE-2025-0415Command Injection in NTP Setting
- CVE-2024-7695Out-of-bounds Write Vulnerability
- CVE-2025-0193Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 Series
- CVE-2024-12297Frontend Authorization Logic Disclosure Vulnerability
- CVE-2024-9140Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140.
- CVE-2024-9138Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
- CVE-2024-9404Denial-of-Service Vulnerability
- CVE-2024-4740MXsecurity Use of Hard-coded Credentials
- CVE-2024-4739MXsecurity License Generation Function Disclosure
- CVE-2024-9139OS Command Injection in Restricted Command
- CVE-2024-9137Moxa Service Missing Authentication for Critical Function
- CVE-2024-6787MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition
- CVE-2024-6786MXview One Series vulnerable to Path Traversal
- CVE-2024-6785MXview One and MXview One Central Manager Series store cleartext credentials in a local file
- CVE-2024-4641OnCell G3470A-LTE Series: Authenticated Format String Errors
- CVE-2024-4640OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail
- CVE-2024-4639OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
- CVE-2024-4638OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
- CVE-2024-3576NPort 5100A Series Store XSS Vulnerability
- CVE-2024-1220NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability
- CVE-2024-0387EDS-4000/G4000 Series IP Forwarding Vulnerability
- CVE-2023-6094OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials
- CVE-2023-6093OnCell G3150A-LTE Series: Clickjacking Vulnerability
- CVE-2023-5962ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability
- CVE-2023-5961ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability
- CVE-2023-5035Cookie Without Secure Flag
- CVE-2023-4217Session cookies attribute not set properly
- CVE-2023-5627Incorrect Implementation of Authentication Algorithm Vulnerability