Moxa vulnerabilities
We track 61 vulnerabilities in Moxa products across 60+ products. 61 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest Moxa vulnerabilities
- 8.8 High severity
NPort 5000AI-M12 Series: Improper Validation of Integrity Check Value
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the
- 7.5 High severity
MXsecurity Series: Improper Authentication
A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.
- 8.1 High severity
MXsecurity Series: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter S
- 9.8 Critical severity
MXsecurity Series: Use of Insufficiently Random Values
There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.
- 8.1 High severity
TN-5900 Series: Improper Limitation of a Pathname to a Restricted Directory
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which c
- 8.1 High severity
TN-5900 Series: Improper Limitation of a Pathname to a Restricted Directory
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could p
- 9.8 Critical severity
TN-5900 Series: Improper Neutralization of Special Elements used in a Command
TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the certification-generation function, which could potentially all
- 9.8 Critical severity
TN-5900 Series: Improper Neutralization of Special Elements used in a Command
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, whi
- 9.8 Critical severity
TN-5900 Series: Improper Neutralization of Special Elements used in a Command
TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the key-generation function, which could potentially allow malicious u
- 9.8 Critical severity
TN-5900 Series: Improper Neutralization of Special Elements used in a Command
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could
- 9.8 Critical severity
TN-5900 Series: Improper Neutralization of Special Elements used in a Command
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which
- 8.8 High severity
TN-5900 Series: Improper Authentication
TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted acti
- 9.8 Critical severity
NPort IAW5000A-I/O Series: Use of Hard-coded Credentials
NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key,
- 9.8 Critical severity
MXsecurity Series: Use of Hard-coded Credentials
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.
- 8.8 High severity
MXsecurity Series: Improper Neutralization of Special Elements used in a Command
MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted sh
- 9.8 Critical severity
MiiNePort E1: Missing Authentication for Critical Functionality
Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service.
- 7.5 High severity
SDS-3008 Series Industrial Ethernet Switch: Cleartext Transmission of Sensitive Information
A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network tra
- 7.5 High severity
SDS-3008 Series Industrial Ethernet Switch: Insufficient Resource Pool
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnera
- 7.6 High severity
IBR600: Improper Neutralization of Special Elements used in a Command
Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.
- 7.8 High severity
UC-8100A-ME-T System Imaage: Improper Privilege Management
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System
- 8.2 High severity
MOXA: Out-of-bounds Write
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or potentially bricking the device.