moxa Vulnerability Advisory Catalog

Total 289 security vulnerabilities recorded for moxa software and firmware.

← Back to All Vendors
Component: sds-3008_firmware

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially...

📅 2023-02-07
CVSS 7.5 Dossier →
Component: sds-3008_firmware

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A speciall...

📅 2023-02-07
CVSS 5.3 Dossier →
Component: sds-3008_firmware

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted H...

📅 2023-02-07
CVSS 7.5 Dossier →
Component: uc-8580-t-lx_firmware

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credential...

📅 2022-12-02
CVSS 7.1 Dossier →
Component: uc-2101-lx_firmware

UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12,&nbsp...

📅 2022-11-28
CVSS 7.8 Dossier →
Component: nport_5110_firmware

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a de...

📅 2022-08-31
CVSS 8.2 Dossier →
Component: nport_5110_firmware

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive....

📅 2022-08-31
CVSS 7.5 Dossier →
Component: mgate_mb3170i_firmware

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MG...

📅 2022-04-15
CVSS 7.4 Dossier →
Component: mxview

An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclo...

📅 2022-04-14
CVSS 7.5 Dossier →
CVE-2021-40390 CRITICAL
Component: mxview

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can l...

📅 2022-04-14
CVSS 9.8 Dossier →
CVE-2021-32976 CRITICAL
Component: nport_iaw5150a-6i\/o_firmware

Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to init...

📅 2022-04-01
CVSS 9.8 Dossier →
CVE-2021-32974 CRITICAL
Component: nport_iaw5150a-6i\/o_firmware

Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to ...

📅 2022-04-01
CVSS 9.8 Dossier →
Component: nport_iaw5150a-6i\/o_firmware

Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a ...

📅 2022-04-01
CVSS 7.5 Dossier →
Component: nport_iaw5150a-6i\/o_firmware

Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause...

📅 2022-04-01
CVSS 7.5 Dossier →
Component: tn-5916-wv-t_firmware

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to con...

📅 2022-02-18
CVSS 7.5 Dossier →
CVE-2021-46560 CRITICAL
Component: tn-5900_firmware

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage....

📅 2022-01-26
CVSS 9.8 Dossier →
Component: tn-5900_firmware

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protecti...

📅 2022-01-26
CVSS 7.5 Dossier →
CVE-2021-4161 CRITICAL
Component: mgate_mb3180_firmware

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could...

📅 2021-12-27
CVSS 9.8 Dossier →
Component: mxview

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite criti...

📅 2021-10-12
CVSS 7.5 Dossier →
CVE-2021-38458 CRITICAL
Component: mxview

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite criti...

📅 2021-10-12
CVSS 9.8 Dossier →
CVE-2021-38456 CRITICAL
Component: mxview

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access t...

📅 2021-10-12
CVSS 9.8 Dossier →
CVE-2021-38454 CRITICAL
Component: mxview

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite criti...

📅 2021-10-12
CVSS 10.0 Dossier →
Component: mxview

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite criti...

📅 2021-10-12
CVSS 7.5 Dossier →
Component: wac-2004_firmware

Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell ...

📅 2021-09-07
CVSS 8.8 Dossier →
Page 3 of 13 (289 Total Records)