Moxa vulnerabilities
137 CVEs and advisories name Moxa as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-4452Web Server Buffer Overflow Vulnerability
- CVE-2023-4929NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability
- CVE-2023-39983MXsecurity Register Database Pollution
- CVE-2023-39982MXsecurity Hardcoded Credential
- CVE-2023-39981MXsecurity Device Information Disclosure
- CVE-2023-39980MXsecurity Authenticated Information Disclosure Due to SQL Injection
- CVE-2023-39979MXsecurity Authentication Bypass
- CVE-2023-4230ioLogik 4000 Series: Server Banner Information Disclosure
- CVE-2023-4229ioLogik 4000 Series: Session Headers Not Implemented
- CVE-2023-4228ioLogik 4000 Series: Session Cookies Attribute Not Set Properly
- CVE-2023-4227ioLogik 4000 Series: Existence of an Unauthorized Service
- CVE-2023-34217Second Order Command-injection Vulnerability in the Certificate-delete Function
- CVE-2023-34216Second Order Command-injection Vulnerability in the Key-delete Function
- CVE-2023-34215Second Order Command-injection Vulnerability in the Certificate-generation Function
- CVE-2023-34214Second Order Command-injection Vulnerability in the Certificate-generation Function
- CVE-2023-34213Second Order Command-injection Vulnerability in the Key-generation Function
- CVE-2023-33239Second Order Command-injection Vulnerability in the Key-generation Function
- CVE-2023-33238Command-injection Vulnerability in Certificate Management
- CVE-2023-33237Authentication Bypass Without Administrator Privilege
- CVE-2023-4204NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability
- CVE-2023-3336TN-5900 Series User Enumeration Vulnerability
- CVE-2023-33236MXsecurity Hardcoded Credential Vulnerability
- CVE-2023-33235MXsecurity Command Injection Vulnerability
- CVE-2023-28697Moxa MiiNePort E1 - Broken Access Control
- CVE-2023-1257CVE-2023-1257
- CVE-2022-40693A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.
- CVE-2022-40224A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.
- CVE-2022-41313A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2
- CVE-2022-41312A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2
- CVE-2022-41311A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2