Moxa
- Total products in the ecosystem
- 132
- Total vulnerabilities (90 days)
- 1
en
Verify to analyze this security profile
As of 09/18/2026, Moxa recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, TN-4500B Series had the most security vulnerabilities in the Moxa ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-15579 | Exploitation statusNot known exploited | FixYes | Affected productTN-4500B Series | Published09/18/2026 | SeverityHigh |
CVE-2026-10831Improper Authorization of Break Signal Commands in Devices | Exploitation statusNot known exploited | FixYes | Affected productNPort 6000 Series | Published06/16/2026 | SeverityMedium |
CVE-2026-10829 | Exploitation statusNot known exploited | FixYes | Affected productNPort W2150A-W4/W2250A-W4 Series | Published06/16/2026 | SeverityHigh |
CVE-2026-10828 | Exploitation statusNot known exploited | FixYes | Affected productNPort W2150A-W4/W2250A-W4 Series | Published06/16/2026 | SeverityMedium |
CVE-2026-10825Improper JSON Input Validation in WebSocket API Leads to Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productNPort 6000-G2 Series | Published06/16/2026 | SeverityHigh |
CVE-2026-9266 | Exploitation statusNot known exploited | FixYes | Affected productUC-1200A Series | Published06/12/2026 | SeverityHigh |
CVE-2026-3868 | Exploitation statusNot known exploited | FixYes | Affected productEDR-8010 Series | Published04/27/2026 | SeverityHigh |
CVE-2026-3867 | Exploitation statusNot known exploited | FixYes | Affected productEDR-8010 Series | Published04/27/2026 | SeverityMedium |
CVE-2026-4483 | Exploitation statusNot known exploited | FixYes | Affected productMxGeneralIo | Published04/08/2026 | SeverityHigh |
CVE-2026-0715 | Exploitation statusNot known exploited | FixYes | Affected productUC-1200A Series | Published02/05/2026 | SeverityHigh |
CVE-2026-0714 | Exploitation statusNot known exploited | FixYes | Affected productUC-1200A Series | Published02/05/2026 | SeverityHigh |
CVE-2025-15017 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNPort 5000AI-M12 Series | Published12/31/2025 | SeverityHigh |
CVE-2025-2026 | Exploitation statusNot known exploited | FixYes | Affected productNPort 6100-G2/6200-G2 Series | Published12/31/2025 | SeverityHigh |
CVE-2025-1977 | Exploitation statusNot known exploited | FixYes | Affected productNPort 6100-G2/6200-G2 Series | Published12/31/2025 | SeverityHigh |
CVE-2025-9315Unauthenticated Device Registration Vulnerability in MXsecurity Series | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published12/10/2025 | SeverityMedium |
CVE-2025-1680 | Exploitation statusNot known exploited | FixYes | Affected productTN-4500A Series | Published10/23/2025 | SeverityInformational |
CVE-2025-1679 | Exploitation statusNot known exploited | FixYes | Affected productTN-4500A Series | Published10/23/2025 | SeverityMedium |
CVE-2025-6950 | Exploitation statusNot known exploited | FixYes | Affected productEDR-G9010 Series | Published10/17/2025 | SeverityCritical |
CVE-2025-6949 | Exploitation statusNot known exploited | FixYes | Affected productEDR-G9010 Series | Published10/17/2025 | SeverityCritical |
CVE-2025-6894 | Exploitation statusNot known exploited | FixYes | Affected productEDR-G9010 Series | Published10/17/2025 | SeverityMedium |
CVE-2025-6893 | Exploitation statusNot known exploited | FixYes | Affected productEDR-G9010 Series | Published10/17/2025 | SeverityCritical |
CVE-2025-6892 | Exploitation statusNot known exploited | FixYes | Affected productEDR-G9010 Series | Published10/17/2025 | SeverityHigh |
CVE-2025-5191Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows) | Exploitation statusNot known exploited | FixYes | Affected productUtility for DRP-A100 Series | Published08/25/2025 | SeverityHigh |
CVE-2025-0676Commend Injection Leading to Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productEDF-G1002-BP Series | Published04/02/2025 | SeverityHigh |
CVE-2025-0415Command Injection in NTP Setting | Exploitation statusNot known exploited | FixYes | Affected productEDF-G1002-BP Series | Published04/02/2025 | SeverityCritical |
CVE-2024-7695Out-of-bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productPT-7728 Series | Published01/29/2025 | SeverityHigh |
CVE-2025-0193Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 Series | Exploitation statusNot known exploited | FixYes | Affected productMGate 5121 Series | Published01/15/2025 | SeverityMedium |
CVE-2024-12297Frontend Authorization Logic Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productEDS-508A Series | Published01/15/2025 | SeverityCritical |
CVE-2024-9140 | Exploitation statusNot known exploited | FixYes | Affected productEDR-8010 Series | Published01/03/2025 | SeverityCritical |
CVE-2024-9138Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances | Exploitation statusNot known exploited | FixYes | Affected productEDR-810 Series | Published01/03/2025 | SeverityHigh |
CVE-2024-9404Denial-of-Service Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productVPort 07-3 Series | Published12/04/2024 | SeverityHigh |
CVE-2024-4740MXsecurity Use of Hard-coded Credentials | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published10/18/2024 | SeverityMedium |
CVE-2024-4739MXsecurity License Generation Function Disclosure | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published10/18/2024 | SeverityMedium |
CVE-2024-9139OS Command Injection in Restricted Command | Exploitation statusNot known exploited | FixYes | Affected productEDR-8010 Series | Published10/14/2024 | SeverityHigh |
CVE-2024-9137Moxa Service Missing Authentication for Critical Function | Exploitation statusNot known exploited | FixYes | Affected productEDR-8010 Series | Published10/14/2024 | SeverityHigh |
CVE-2024-6787MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition | Exploitation statusNot known exploited | FixYes | Affected productMXview One Series | Published09/21/2024 | SeverityMedium |
CVE-2024-6786MXview One Series vulnerable to Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productMXview One Series | Published09/21/2024 | SeverityMedium |
CVE-2024-6785MXview One and MXview One Central Manager Series store cleartext credentials in a local file | Exploitation statusNot known exploited | FixYes | Affected productMXview One Series | Published09/21/2024 | SeverityMedium |
CVE-2024-4641OnCell G3470A-LTE Series: Authenticated Format String Errors | Exploitation statusNot known exploited | FixYes | Affected productOnCell G3150A-LTE Series | Published06/25/2024 | SeverityMedium |
CVE-2024-4640OnCell G3470A-LTE Series: Authenticated Command Injection via sendTestEmail | Exploitation statusNot known exploited | FixYes | Affected productOnCell G3150A-LTE Series | Published06/25/2024 | SeverityHigh |
CVE-2024-4639OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec | Exploitation statusNot known exploited | FixYes | Affected productOnCell G3150A-LTE Series | Published06/25/2024 | SeverityHigh |
CVE-2024-4638OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey | Exploitation statusNot known exploited | FixYes | Affected productOnCell G3470A-LTE Series | Published06/25/2024 | SeverityHigh |
CVE-2024-3576NPort 5100A Series Store XSS Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNPort 5100A Series | Published05/06/2024 | SeverityHigh |
CVE-2024-1220NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNPort W2150A/W2250A Series | Published03/06/2024 | SeverityHigh |
CVE-2024-0387EDS-4000/G4000 Series IP Forwarding Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productEDS-4008 Series | Published02/26/2024 | SeverityMedium |
CVE-2023-6094OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials | Exploitation statusNot known exploited | FixYes | Affected productOnCell G3150A-LTE Series | Published12/31/2023 | SeverityMedium |
CVE-2023-6093OnCell G3150A-LTE Series: Clickjacking Vulnerability | Exploitation statusNot confirmed | FixYes | Affected productOnCell G3150A-LTE Series | Published12/31/2023 | SeverityMedium |
CVE-2023-5962ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability | Exploitation statusNot confirmed | FixYes | Affected productioLogik E1200 Series | Published12/23/2023 | SeverityMedium |
CVE-2023-5961ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productioLogik E1200 Series | Published12/23/2023 | SeverityHigh |
CVE-2023-5035Cookie Without Secure Flag | Exploitation statusNot known exploited | FixYes | Affected productPT-G503 Series | Published11/02/2023 | SeverityLow |
CVE-2023-4217Session cookies attribute not set properly | Exploitation statusNot known exploited | FixYes | Affected productPT-G503 Series | Published11/02/2023 | SeverityLow |
CVE-2023-5627Incorrect Implementation of Authentication Algorithm Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNPort 6000 Series | Published11/01/2023 | SeverityHigh |
CVE-2023-4452Web Server Buffer Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productEDR-810 Series | Published11/01/2023 | SeverityMedium |
CVE-2023-4929NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNPort 5000AI-M12 Series | Published10/03/2023 | SeverityMedium |
CVE-2023-39983MXsecurity Register Database Pollution | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published09/02/2023 | SeverityMedium |
CVE-2023-39982MXsecurity Hardcoded Credential | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published09/02/2023 | SeverityHigh |
CVE-2023-39981MXsecurity Device Information Disclosure | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published09/02/2023 | SeverityHigh |
CVE-2023-39980MXsecurity Authenticated Information Disclosure Due to SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published09/02/2023 | SeverityHigh |
CVE-2023-39979MXsecurity Authentication Bypass | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published09/02/2023 | SeverityCritical |
CVE-2023-4230ioLogik 4000 Series: Server Banner Information Disclosure | Exploitation statusNot known exploited | FixYes | Affected productioLogik 4000 Series | Published08/24/2023 | SeverityMedium |
CVE-2023-4229ioLogik 4000 Series: Session Headers Not Implemented | Exploitation statusNot known exploited | FixYes | Affected productioLogik 4000 Series | Published08/24/2023 | SeverityMedium |
CVE-2023-4228ioLogik 4000 Series: Session Cookies Attribute Not Set Properly | Exploitation statusNot known exploited | FixYes | Affected productioLogik 4000 Series | Published08/24/2023 | SeverityLow |
CVE-2023-4227ioLogik 4000 Series: Existence of an Unauthorized Service | Exploitation statusNot known exploited | FixYes | Affected productioLogik 4000 Series | Published08/24/2023 | SeverityMedium |
CVE-2023-34217Second Order Command-injection Vulnerability in the Certificate-delete Function | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-34216Second Order Command-injection Vulnerability in the Key-delete Function | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-34215Second Order Command-injection Vulnerability in the Certificate-generation Function | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-34214Second Order Command-injection Vulnerability in the Certificate-generation Function | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-34213Second Order Command-injection Vulnerability in the Key-generation Function | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-33239Second Order Command-injection Vulnerability in the Key-generation Function | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-33238Command-injection Vulnerability in Certificate Management | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-33237Authentication Bypass Without Administrator Privilege | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published08/17/2023 | SeverityHigh |
CVE-2023-4204NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNPort IAW5000A-I/O Series | Published08/16/2023 | SeverityMedium |
CVE-2023-3336TN-5900 Series User Enumeration Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productTN-5900 Series | Published07/05/2023 | SeverityMedium |
CVE-2023-33236MXsecurity Hardcoded Credential Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published05/22/2023 | SeverityCritical |
CVE-2023-33235MXsecurity Command Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productMXsecurity Series | Published05/22/2023 | SeverityHigh |
CVE-2023-28697Moxa MiiNePort E1 - Broken Access Control | Exploitation statusNot known exploited | FixYes | Affected productMiiNePort E1 | Published04/27/2023 | SeverityCritical |
CVE-2023-1257 | Exploitation statusNot known exploited | FixNot confirmed | Affected productUC-8580 Series | Published03/07/2023 | SeverityHigh |
CVE-2022-40693 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSDS-3008 Series Industrial Ethernet Switch | Published02/07/2023 | SeverityMedium |
CVE-2022-40224 | Exploitation statusPublic exploit | FixNot confirmed | Affected productSDS-3008 Series Industrial Ethernet Switch | Published02/07/2023 | SeverityMedium |
CVE-2022-41313 | Exploitation statusPublic exploit | FixNot confirmed | Affected productSDS-3008 Series Industrial Ethernet Switch | Published02/07/2023 | SeverityMedium |
CVE-2022-41312 | Exploitation statusPublic exploit | FixNot confirmed | Affected productSDS-3008 Series Industrial Ethernet Switch | Published02/07/2023 | SeverityMedium |
CVE-2022-41311 | Exploitation statusPublic exploit | FixNot confirmed | Affected productSDS-3008 Series Industrial Ethernet Switch | Published02/07/2023 | SeverityMedium |
CVE-2022-40691 | Exploitation statusPublic exploit | FixNot confirmed | Affected productSDS-3008 Series Industrial Ethernet Switch | Published02/07/2023 | SeverityMedium |
CVE-2022-3088 | Exploitation statusNot known exploited | FixYes | Affected productUC-8100A-ME-T System Imaage | Published11/22/2022 | SeverityHigh |
CVE-2022-2043MOXA NPort 5110 Out-of-bounds Write | Exploitation statusNot known exploited | FixNot confirmed | Affected productMOXA | Published08/31/2022 | SeverityHigh |
CVE-2022-2044MOXA NPort 5110 Out-of-bounds Write | Exploitation statusNot known exploited | FixNot confirmed | Affected productMOXA | Published08/31/2022 | SeverityHigh |
CVE-2021-40392 | Exploitation statusPublic exploit | FixNot confirmed | Affected productMXView Series | Published04/14/2022 | SeverityMedium |
CVE-2021-40390 | Exploitation statusPublic exploit | FixNot confirmed | Affected productMXView Series | Published04/14/2022 | SeverityCritical |
CVE-2021-32976Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow | Exploitation statusNot known exploited | FixYes | Affected productNPort IAW5000A-I/O Series firmware | Published04/01/2022 | SeverityCritical |
CVE-2021-32970Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation | Exploitation statusNot known exploited | FixYes | Affected productNPort IAW5000A-I/O Series firmware | Published04/01/2022 | SeverityHigh |
CVE-2021-32974Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation | Exploitation statusNot known exploited | FixYes | Affected productNPort IAW5000A-I/O Series firmware | Published04/01/2022 | SeverityCritical |
CVE-2021-32968Moxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer Overflow | Exploitation statusNot known exploited | FixYes | Affected productNPort IAW5000A-I/O Series firmware | Published04/01/2022 | SeverityHigh |
CVE-2021-4161ICSA-21-357-01 Moxa MGate Protocol Gateways | Exploitation statusNot confirmed | FixYes | Affected productMGate MB3180 Series | Published12/27/2021 | SeverityCritical |
CVE-2021-38460Moxa MXview Network Management Software | Exploitation statusNot confirmed | FixYes | Affected productMXview Network Management Software | Published10/12/2021 | SeverityHigh |
CVE-2021-38458Moxa MXview Network Management Software | Exploitation statusNot confirmed | FixYes | Affected productMXview Network Management Software | Published10/12/2021 | SeverityCritical |
CVE-2021-38454Moxa MXview Network Management Software | Exploitation statusNot confirmed | FixYes | Affected productMXview Network Management Software | Published10/12/2021 | SeverityCritical |
CVE-2021-38456Moxa MXview Network Management Software | Exploitation statusNot confirmed | FixYes | Affected productMXview Network Management Software | Published10/12/2021 | SeverityCritical |
CVE-2021-38452Moxa MXview Network Management Software | Exploitation statusNot confirmed | FixYes | Affected productMXview Network Management Software | Published10/12/2021 | SeverityHigh |
CVE-2020-25196MOXA NPort IAW5000A-I/O Series | Exploitation statusNot confirmed | FixYes | Affected productNPort IAW5000A-I/O | Published12/23/2020 | SeverityCritical |
CVE-2020-25153MOXA NPort IAW5000A-I/O Series | Exploitation statusNot confirmed | FixYes | Affected productNPort IAW5000A-I/O | Published12/23/2020 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan