moxa Vulnerability Advisory Catalog

Total 289 security vulnerabilities recorded for moxa software and firmware.

← Back to All Vendors
Component: iologik_2512_firmware

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is store...

📅 2020-02-26
CVSS 7.5 Dossier →
Component: awk-3131a_firmware

An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configur...

📅 2020-02-25
CVSS 7.2 Dossier →
Component: awk-3131a_firmware

An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13....

📅 2020-02-25
CVSS 8.8 Dossier →
Component: awk-3131a_firmware

An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1....

📅 2020-02-25
CVSS 8.8 Dossier →
Component: awk-3131a_firmware

An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted ...

📅 2020-02-25
CVSS 7.5 Dossier →
Component: awk-3131a_firmware

An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specia...

📅 2020-02-25
CVSS 8.8 Dossier →
Component: awk-3131a_firmware

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted e...

📅 2020-02-25
CVSS 7.2 Dossier →
Component: awk-3131a_firmware

An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iw...

📅 2020-02-25
CVSS 8.8 Dossier →
Component: awk-3131a_firmware

An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted dia...

📅 2020-02-25
CVSS 8.8 Dossier →
Component: awk-3131a_firmware

An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13. The device o...

📅 2020-02-25
CVSS 7.1 Dossier →
CVE-2019-5138 CRITICAL
Component: awk-3131a_firmware

An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A spec...

📅 2020-02-25
CVSS 9.9 Dossier →
Component: awk-3131a_firmware

The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to ...

📅 2020-02-25
CVSS 7.5 Dossier →
Component: awk-3131a_firmware

An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially craf...

📅 2020-02-25
CVSS 8.8 Dossier →
Component: mgate_5105-mb-eip_firmware

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authent...

📅 2020-02-14
CVSS 8.8 Dossier →
Component: eds-g508e_firmware

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint discovery p...

📅 2019-12-11
CVSS 7.5 Dossier →
Component: edr-810_firmware

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, w...

📅 2019-10-08
CVSS 7.2 Dossier →
Component: edr-810_firmware

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow se...

📅 2019-10-08
CVSS 4.3 Dossier →
CVE-2018-11425 CRITICAL
Component: oncell_g3470a-lte-us_firmware

Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-...

📅 2019-07-03
CVSS 9.8 Dossier →
Component: oncell_g3470a-lte-us_firmware

There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than ...

📅 2019-07-03
CVSS 7.5 Dossier →
Component: oncell_g3150-hspa_firmware

There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2...

📅 2019-07-03
CVSS 7.5 Dossier →
CVE-2018-11422 CRITICAL
Component: oncell_g3150-hspa_firmware

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does not provide confidentiality, int...

📅 2019-07-03
CVSS 9.8 Dossier →
CVE-2018-11421 CRITICAL
Component: oncell_g3150-hspa_firmware

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integr...

📅 2019-07-03
CVSS 9.8 Dossier →
CVE-2018-11420 CRITICAL
Component: oncell_g3150-hspa_firmware

There is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 and prio,r a different vulnerability than ...

📅 2019-07-03
CVSS 9.8 Dossier →
Component: oncell_g3150-hspa_firmware

CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perf...

📅 2019-07-03
CVSS 8.8 Dossier →
Page 6 of 13 (289 Total Records)