MO
Vendor
Moxa
1,569
CVEs
0
On KEV
10
New 30D
Products
MM9.4
MGate MB3170 Series
Moxa
2 CVEs0 on KEV2 new
MM9.4
MGate MB3270 Series
Moxa
2 CVEs0 on KEV2 new
AS8.6
AIG-302 Series
Moxa
2 CVEs0 on KEV2 new
OG7.7
OnCell G3150A-LTE Series
Moxa
2 CVEs0 on KEV2 new
NW8.6
NPort W2150A-W4/W2250A-W4 Series
Moxa
3 CVEs0 on KEV1 new
MR7.6
Moxa Remote Connect Suite (MRC Client)
Moxa
1 CVEs0 on KEV1 new
AF10.0
Awk-3131a Firmware
Moxa
28 CVEs0 on KEV0 new
EF8.8
Edr-810 Firmware
Moxa
21 CVEs0 on KEV0 new
AF9.8
Awk-3121 Firmware
Moxa
14 CVEs0 on KEV0 new
EF9.8
Eds-405a Firmware
Moxa
13 CVEs0 on KEV0 new
EF9.8
Eds-408a Firmware
Moxa
13 CVEs0 on KEV0 new
MX10.0
Mxview
Moxa
13 CVEs0 on KEV0 new
TF9.8
Tn-5900 Firmware
Moxa
11 CVEs0 on KEV0 new
EG9.8
Edr G903 Firmware
Moxa
10 CVEs0 on KEV0 new
EF9.8
Eds-510a Firmware
Moxa
10 CVEs0 on KEV0 new
IF9.8
Iks-g6824a Firmware
Moxa
10 CVEs0 on KEV0 new
ES9.9
EDR-8010 Series
Moxa
9 CVEs0 on KEV0 new
ES9.9
EDR-G9010 Series
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3170 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3180 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3270 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3280 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3480 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3660 Firmware
Moxa
9 CVEs0 on KEV0 new
MX9.8
Mxsecurity
Moxa
9 CVEs0 on KEV0 new
OG9.8
Oncell G3150-hspa Firmware
Moxa
9 CVEs0 on KEV0 new
OG9.8
Oncell G3150-hspa-t Firmware
Moxa
9 CVEs0 on KEV0 new
N59.8
Nport 5100 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5100a Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5200 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5200a Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5400 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5600-8-dtl Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5600 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5x50a1-m12 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N69.8
Nport 6100 Series Firmware
Moxa
8 CVEs0 on KEV0 new
NP9.8
Nport P5150a Series Firmware
Moxa
8 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-eu Firmware
Moxa
8 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-eu-t Firmware
Moxa
8 CVEs0 on KEV0 new
ES9.9
EDF-G1002-BP Series
Moxa
7 CVEs0 on KEV0 new
EF9.8
Eds-g512e Firmware
Moxa
7 CVEs0 on KEV0 new
EF9.8
Eds-g516e Firmware
Moxa
7 CVEs0 on KEV0 new
NS9.9
NAT-102 Series
Moxa
7 CVEs0 on KEV0 new
NI9.8
Nport Iaw5000a-i/o Firmware
Moxa
7 CVEs0 on KEV0 new
OG9.9
OnCell G4302-LTE4 Series
Moxa
7 CVEs0 on KEV0 new
SO9.8
SoftCMS
Moxa
7 CVEs0 on KEV0 new
TH9.8
Thingspro
Moxa
7 CVEs0 on KEV0 new
TS9.9
TN-4900 Series
Moxa
7 CVEs0 on KEV0 new
EF9.8
Eds-510e Firmware
Moxa
6 CVEs0 on KEV0 new
N58.8
Nport 5110 Firmware
Moxa
6 CVEs0 on KEV0 new
OG9.8
Oncell G3110-hspa Firmware
Moxa
6 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-us Firmware
Moxa
6 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-us-t Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-wv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12mst-12tx-4gsfp-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12mst-12tx-4gsfp-wv Firmware
Moxa
6 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111548 New | NW NPort W2150A-W4/W2250A-W4 Series Moxa | 5.3 | Oct 27 | A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers |
| CVE-2026-111461 New | OG OnCell G3150A-LTE Series Moxa | 7.5 | Oct 27 | SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series |
| CVE-2026-111460 New | OG OnCell G3150A-LTE Series Moxa | 7.7 | Oct 27 | Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series |
| CVE-2026-111459 New | MR Moxa Remote Connect Suite (MRC Client) Moxa | 7.6 | Oct 27 | Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) |
| CVE-2026-109813 | AS AIG-302 Series Moxa | 8.6 | Oct 16 | Shared Hard-coded Root CA Private Key |
| CVE-2026-109812 | AS AIG-302 Series Moxa | 6.9 | Oct 16 | Missing Authorization on Secret Endpoints |
| CVE-2026-86326 | MM MGate MB3170 Series Moxa | 8.6 | Oct 2 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of… |
| CVE-2026-86325 | MM MGate MB3170 Series Moxa | 9.4 | Oct 2 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface |
| CVE-2026-15579 | TS TN-4500B Series Moxa | 8.8 | Sep 18 | An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing |
| CVE-2026-10831 | N6 NPort 6000 Series Moxa | 6.9 | Jun 16 | Improper Authorization of Break Signal Commands in Devices |
| CVE-2026-10829 | NW NPort W2150A/W2250A Series Moxa | 8.6 | Jun 16 | A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier |
| CVE-2026-10828 | NW NPort W2150A-W4/W2250A-W4 Series Moxa | 6.9 | Jun 16 | A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior |
| CVE-2026-10825 | N6 NPort 6000-G2 Series Moxa | 7.1 | Jun 16 | Improper JSON Input Validation in WebSocket API Leads to Denial of Service |
| CVE-2026-9266 | US UC-1200A Series Moxa | 7.0 | Jun 12 | A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers |
| CVE-2026-3868 | ES EDR-G9010 Series Moxa | 8.7 | Apr 27 | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the… |
| CVE-2026-3867 | ES EDR-G9010 Series Moxa | 6.0 | Apr 27 | An improper ownership management vulnerability has been identified in Moxa’s Secure Router |
| CVE-2026-4483 | MX MxGeneralIo Moxa | 7.0 | Apr 8 | An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility,… |
| CVE-2026-0715 | US UC-1200A Series Moxa | 6.8 | Feb 5 | Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device |
| CVE-2026-0714 | US UC-1200A Series Moxa | 6.8 | Feb 5 | A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is… |
| CVE-2025-15017 | N5 NPort 5100 Series Moxa | 7.0 | Dec 31 | A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface |
| CVE-2025-2026 | N6 NPort 6100-G2/6200-G2 Series Moxa | 7.1 | Dec 31 | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null byte injection through the device’s… |
| CVE-2025-1977 | N6 NPort 6100-G2/6200-G2 Series Moxa | 7.7 | Dec 31 | The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authenticated user with read-only access to… |
| CVE-2025-9315 | MS MXsecurity Series Moxa | 6.3 | Dec 10 | Unauthenticated Device Registration Vulnerability in MXsecurity Series |
| CVE-2025-1680 | TS TN-5500A Series Moxa | 0.0 | Oct 23 | An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges… |
| CVE-2025-1679 | TS TN-5500A Series Moxa | 4.8 | Oct 23 | Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web… |
| CVE-2025-6950 | ES EDR-8010 Series Moxa | 9.9 | Oct 17 | An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6949 | TS TN-4900 Series Moxa | 9.3 | Oct 17 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6894 | ES EDR-8010 Series Moxa | 5.3 | Oct 17 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6893 | ES EDF-G1002-BP Series Moxa | 9.3 | Oct 17 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6892 | NS NAT-108 Series Moxa | 8.7 | Oct 17 | An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-5191 | UF Utility for DRP-C100 Series Moxa | 7.3 | Aug 25 | Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows) |
| CVE-2024-9140 | TS TN-4900 Series Moxa | 9.8 | Jan 3 | Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140 |
| CVE-2024-9138 | ES EDF-G1002-BP Series Moxa | 7.2 | Jan 3 | Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances |
| CVE-2024-4740 | MX Mxsecurity Moxa | 7.5 | Oct 18 | MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials |
| CVE-2024-4739 | MX Mxsecurity Moxa | 7.5 | Oct 18 | The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable |
| CVE-2024-6787 | MO Mxview One Moxa | 5.9 | Sep 21 | This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU) |
| CVE-2024-6786 | MO Mxview One Moxa | 6.5 | Sep 21 | The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system |
| CVE-2024-6785 | MO Mxview One Central Manager Moxa | 7.1 | Sep 21 | The configuration file stores credentials in cleartext |
| CVE-2024-4641 | OG Oncell G3470a-lte-eu-t Firmware Moxa | 9.8 | Jun 25 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument |
| CVE-2024-4640 | OG Oncell G3470a-lte-eu Firmware Moxa | 8.2 | Jun 25 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations |
| CVE-2024-4639 | OG Oncell G3470a-lte-eu Firmware Moxa | 8.8 | Jun 25 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration |
| CVE-2024-4638 | OG Oncell G3470a-lte-us Firmware Moxa | 8.8 | Jun 25 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function |
| CVE-2024-1220 | NW Nport W2150a-t Firmware Moxa | 7.5 | Mar 6 | A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by… |
| CVE-2024-0387 | EF Eds-4008 Firmware Moxa | 6.5 | Feb 26 | The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate |
| CVE-2023-6094 | OG Oncell G3150a-lte Firmware Moxa | 5.3 | Dec 31 | A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior |
| CVE-2023-6093 | OG Oncell G3150a-lte Firmware Moxa | 6.1 | Dec 31 | A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior |
| CVE-2023-5962 | IE Iologik E1210 Firmware Moxa | 6.5 | Dec 23 | A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior |
| CVE-2023-5961 | IE Iologik E1210 Firmware Moxa | 8.8 | Dec 23 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior |
| CVE-2023-5035 | EF Eds-g503 Firmware Moxa | 5.3 | Nov 2 | A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could… |
| CVE-2023-4217 | EF Eds-g503 Firmware Moxa | 5.3 | Nov 2 | A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application |
| CVE-2023-5627 | N6 Nport 6150-t Firmware Moxa | 7.5 | Nov 1 | A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable |
| CVE-2023-4452 | EF Edr-810-vpn-2gsfp Firmware Moxa | 7.5 | Nov 1 | A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability |
| CVE-2023-4929 | N5 Nport 5250ai-m12-ct Firmware Moxa | 8.8 | Oct 3 | All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability |
| CVE-2023-39983 | MX Mxsecurity Moxa | 5.3 | Sep 2 | A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1 |
| CVE-2023-39982 | MX Mxsecurity Moxa | 5.9 | Sep 2 | A vulnerability has been identified in MXsecurity versions prior to v1.0.1 |
| CVE-2023-39981 | MX Mxsecurity Moxa | 7.5 | Sep 2 | A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1 |
| CVE-2023-39980 | MX Mxsecurity Moxa | 8.1 | Sep 2 | A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1 |
| CVE-2023-39979 | MX Mxsecurity Moxa | 9.8 | Sep 2 | There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication |
| CVE-2023-4230 | IE Iologik E4200 Firmware Moxa | 5.3 | Aug 24 | A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which has the potential to facilitate the collection of information on… |
| CVE-2023-4229 | IE Iologik E4200 Firmware Moxa | 4.7 | Aug 24 | A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks |