MO
Vendor
Moxa
1,802
CVEs
0
On KEV
10
New 30D
Products
OG9.8
OnCell G3150A-LTE Series
Moxa
5 CVEs0 on KEV2 new
MM9.4
MGate MB3170 Series
Moxa
2 CVEs0 on KEV2 new
MM9.4
MGate MB3270 Series
Moxa
2 CVEs0 on KEV2 new
AS8.6
AIG-302 Series
Moxa
2 CVEs0 on KEV2 new
NW8.6
NPort W2150A-W4/W2250A-W4 Series
Moxa
3 CVEs0 on KEV1 new
MR7.6
Moxa Remote Connect Suite (MRC Client)
Moxa
1 CVEs0 on KEV1 new
AF10.0
Awk-3131a Firmware
Moxa
28 CVEs0 on KEV0 new
EF8.8
Edr-810 Firmware
Moxa
22 CVEs0 on KEV0 new
AF9.8
Awk-3121 Firmware
Moxa
14 CVEs0 on KEV0 new
ES9.9
EDR-8010 Series
Moxa
13 CVEs0 on KEV0 new
ES9.9
EDR-G9010 Series
Moxa
13 CVEs0 on KEV0 new
EF9.8
Eds-405a Firmware
Moxa
13 CVEs0 on KEV0 new
EF9.8
Eds-408a Firmware
Moxa
13 CVEs0 on KEV0 new
MX10.0
Mxview
Moxa
13 CVEs0 on KEV0 new
ES9.9
EDF-G1002-BP Series
Moxa
11 CVEs0 on KEV0 new
NS9.9
NAT-102 Series
Moxa
11 CVEs0 on KEV0 new
OG9.9
OnCell G4302-LTE4 Series
Moxa
11 CVEs0 on KEV0 new
TS9.9
TN-4900 Series
Moxa
11 CVEs0 on KEV0 new
TF9.8
Tn-5900 Firmware
Moxa
11 CVEs0 on KEV0 new
EG9.8
Edr G903 Firmware
Moxa
10 CVEs0 on KEV0 new
EF9.8
Eds-510a Firmware
Moxa
10 CVEs0 on KEV0 new
IF9.8
Iks-g6824a Firmware
Moxa
10 CVEs0 on KEV0 new
MF9.8
Mb3170 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3180 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3270 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3280 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3480 Firmware
Moxa
9 CVEs0 on KEV0 new
MF9.8
Mb3660 Firmware
Moxa
9 CVEs0 on KEV0 new
MX9.8
Mxsecurity
Moxa
9 CVEs0 on KEV0 new
N59.8
Nport 5100a Series Firmware
Moxa
9 CVEs0 on KEV0 new
OG9.8
Oncell G3150-hspa Firmware
Moxa
9 CVEs0 on KEV0 new
OG9.8
Oncell G3150-hspa-t Firmware
Moxa
9 CVEs0 on KEV0 new
N59.8
Nport 5100 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5200 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5200a Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5400 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5600-8-dtl Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5600 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N59.8
Nport 5x50a1-m12 Series Firmware
Moxa
8 CVEs0 on KEV0 new
N69.8
Nport 6100 Series Firmware
Moxa
8 CVEs0 on KEV0 new
NP9.8
Nport P5150a Series Firmware
Moxa
8 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-eu Firmware
Moxa
8 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-eu-t Firmware
Moxa
8 CVEs0 on KEV0 new
EF9.8
Eds-g512e Firmware
Moxa
7 CVEs0 on KEV0 new
EF9.8
Eds-g516e Firmware
Moxa
7 CVEs0 on KEV0 new
NI9.8
Nport Iaw5000a-i/o Firmware
Moxa
7 CVEs0 on KEV0 new
SO9.8
SoftCMS
Moxa
7 CVEs0 on KEV0 new
TH9.8
Thingspro
Moxa
7 CVEs0 on KEV0 new
ES9.8
EDR-G9004 Series
Moxa
6 CVEs0 on KEV0 new
EF9.8
Eds-510e Firmware
Moxa
6 CVEs0 on KEV0 new
N58.8
Nport 5110 Firmware
Moxa
6 CVEs0 on KEV0 new
OG9.8
Oncell G3110-hspa Firmware
Moxa
6 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-us Firmware
Moxa
6 CVEs0 on KEV0 new
OG9.8
Oncell G3470a-lte-us-t Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-wv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12mst-12tx-4gsfp-hv Firmware
Moxa
6 CVEs0 on KEV0 new
PF9.8
Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware
Moxa
6 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111548 New | NW NPort W2150A-W4/W2250A-W4 Series Moxa | 5.3 | Oct 27 | A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers |
| CVE-2026-111461 New | OG OnCell G3150A-LTE Series Moxa | 7.5 | Oct 27 | SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series |
| CVE-2026-111460 New | OG OnCell G3150A-LTE Series Moxa | 7.7 | Oct 27 | Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series |
| CVE-2026-111459 New | MR Moxa Remote Connect Suite (MRC Client) Moxa | 7.6 | Oct 27 | Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) |
| CVE-2026-109813 | AS AIG-302 Series Moxa | 8.6 | Oct 16 | Shared Hard-coded Root CA Private Key |
| CVE-2026-109812 | AS AIG-302 Series Moxa | 6.9 | Oct 16 | Missing Authorization on Secret Endpoints |
| CVE-2026-86326 | MM MGate MB3270 Series Moxa | 8.6 | Oct 2 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of… |
| CVE-2026-86325 | MM MGate MB3170 Series Moxa | 9.4 | Oct 2 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface |
| CVE-2026-15579 | TS TN-4500B Series Moxa | 8.8 | Sep 18 | An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing |
| CVE-2026-10831 | N6 NPort 6000 Series Moxa | 6.9 | Jun 16 | Improper Authorization of Break Signal Commands in Devices |
| CVE-2026-10829 | NW NPort W2150A-W4/W2250A-W4 Series Moxa | 8.6 | Jun 16 | A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier |
| CVE-2026-10828 | NW NPort W2150A-W4/W2250A-W4 Series Moxa | 6.9 | Jun 16 | A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior |
| CVE-2026-10825 | N6 NPort 6000-G2 Series Moxa | 7.1 | Jun 16 | Improper JSON Input Validation in WebSocket API Leads to Denial of Service |
| CVE-2026-9266 | US UC-1200A Series Moxa | 7.0 | Jun 12 | A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers |
| CVE-2026-3868 | ES EDR-8010 Series Moxa | 8.7 | Apr 27 | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the… |
| CVE-2026-3867 | ES EDR-G9010 Series Moxa | 6.0 | Apr 27 | An improper ownership management vulnerability has been identified in Moxa’s Secure Router |
| CVE-2026-4483 | MX MxGeneralIo Moxa | 7.0 | Apr 8 | An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility,… |
| CVE-2026-0715 | US UC-1200A Series Moxa | 6.8 | Feb 5 | Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device |
| CVE-2026-0714 | US UC-1200A Series Moxa | 6.8 | Feb 5 | A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is… |
| CVE-2025-15017 | N5 NPort 5000AI-M12 Series Moxa | 7.0 | Dec 31 | A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface |
| CVE-2025-2026 | N6 NPort 6100-G2/6200-G2 Series Moxa | 7.1 | Dec 31 | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null byte injection through the device’s… |
| CVE-2025-1977 | N6 NPort 6100-G2/6200-G2 Series Moxa | 7.7 | Dec 31 | The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authenticated user with read-only access to… |
| CVE-2025-9315 | MS MXsecurity Series Moxa | 6.3 | Dec 10 | Unauthenticated Device Registration Vulnerability in MXsecurity Series |
| CVE-2025-1680 | TS TN-G6500 Series Moxa | 0.0 | Oct 23 | An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges… |
| CVE-2025-1679 | TS TN-G4500 Series Moxa | 4.8 | Oct 23 | Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web… |
| CVE-2025-6950 | NS NAT-102 Series Moxa | 9.9 | Oct 17 | An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6949 | ES EDF-G1002-BP Series Moxa | 9.3 | Oct 17 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6894 | ES EDF-G1002-BP Series Moxa | 5.3 | Oct 17 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6893 | ES EDF-G1002-BP Series Moxa | 9.3 | Oct 17 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-6892 | ES EDF-G1002-BP Series Moxa | 8.7 | Oct 17 | An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers |
| CVE-2025-5191 | UF Utility for DRP-C100 Series Moxa | 7.3 | Aug 25 | Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows) |
| CVE-2025-0676 | OG OnCell G4302-LTE4 Series Moxa | 8.6 | Apr 2 | Commend Injection Leading to Privilege Escalation |
| CVE-2025-0415 | OG OnCell G4302-LTE4 Series Moxa | 9.2 | Apr 2 | Command Injection in NTP Setting |
| CVE-2024-7695 | TS TN-G4500 Series Moxa | 7.5 | Jan 29 | Out-of-bounds Write Vulnerability |
| CVE-2025-0193 | M5 MGate 5123 Series Moxa | 5.2 | Jan 15 | Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 Series |
| CVE-2024-12297 | PS PT-7528 Series Moxa | 9.2 | Jan 15 | Frontend Authorization Logic Disclosure Vulnerability |
| CVE-2024-9140 | TS TN-4900 Series Moxa | 9.8 | Jan 3 | Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140 |
| CVE-2024-9138 | ES EDR-G9004 Series Moxa | 7.2 | Jan 3 | Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances |
| CVE-2024-9404 | SS SDS-3016 Series Moxa | 7.5 | Dec 4 | Denial-of-Service Vulnerability |
| CVE-2024-4740 | MS MXsecurity Series Moxa | 7.5 | Oct 18 | MXsecurity Use of Hard-coded Credentials |
| CVE-2024-4739 | MS MXsecurity Series Moxa | 7.5 | Oct 18 | MXsecurity License Generation Function Disclosure |
| CVE-2024-9139 | OG OnCell G4302-LTE4 Series Moxa | 7.2 | Oct 14 | OS Command Injection in Restricted Command |
| CVE-2024-9137 | IS ICS-G7848A Series Moxa | 9.4 | Oct 14 | Moxa Service Missing Authentication for Critical Function |
| CVE-2024-6787 | MO MXview One Series Moxa | 5.9 | Sep 21 | MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition |
| CVE-2024-6786 | MO MXview One Series Moxa | 6.5 | Sep 21 | MXview One Series vulnerable to Path Traversal |
| CVE-2024-6785 | MO MXview One Series Moxa | 7.1 | Sep 21 | MXview One and MXview One Central Manager Series store cleartext credentials in a local file |
| CVE-2024-4641 | OG OnCell G3150A-LTE Series Moxa | 9.8 | Jun 25 | OnCell G3470A-LTE Series: Authenticated Format String Errors |
| CVE-2024-4640 | OG OnCell G3150A-LTE Series Moxa | 8.2 | Jun 25 | OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail |
| CVE-2024-4639 | OG OnCell G3150A-LTE Series Moxa | 8.8 | Jun 25 | OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec |
| CVE-2024-4638 | OG OnCell G3470A-LTE Series Moxa | 8.8 | Jun 25 | OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey |
| CVE-2024-3576 | N5 NPort 5100A Series Moxa | 8.3 | May 6 | NPort 5100A Series Store XSS Vulnerability |
| CVE-2024-1220 | NW NPort W2150A/W2250A Series Moxa | 7.5 | Mar 6 | NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability |
| CVE-2024-0387 | ES EDS-4009 Series Moxa | 6.5 | Feb 26 | EDS-4000/G4000 Series IP Forwarding Vulnerability |
| CVE-2023-6094 | OG Oncell G3150a-lte Firmware Moxa | 5.3 | Dec 31 | A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior |
| CVE-2023-6093 | OG Oncell G3150a-lte Firmware Moxa | 6.1 | Dec 31 | A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior |
| CVE-2023-5962 | IE Iologik E1210 Firmware Moxa | 6.5 | Dec 23 | A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior |
| CVE-2023-5961 | IE Iologik E1240 Firmware Moxa | 8.8 | Dec 23 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior |
| CVE-2023-5035 | EF Eds-g503 Firmware Moxa | 5.3 | Nov 2 | A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could… |
| CVE-2023-4217 | EF Eds-g503 Firmware Moxa | 5.3 | Nov 2 | A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application |
| CVE-2023-5627 | N6 Nport 6150 Firmware Moxa | 7.5 | Nov 1 | A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable |