CVE-2023-5961

This repository contains a Python script and a nuclei template designed to detect vulnerabilities in Moxa ioLogik devices, specifically focusing on the CVE-2023-5961 vulnerability. Additionally, it provides information about the vulnerability and relevant security advisories. Vulnerability...

MoxaPass

This is a sample exploit for CVE-2016-9361. It retrieves the SNMP community string and 'admin' password for many kinds of Moxa device. It uses Moxa's UDP/4800 proprietary management protocol. The protocol lacks security, and using the 'unlock' function code does not require a password. This explo...

Moxa MAR-2000 FWR_MAR2000_V1.0_Build_15010909 Scenario Ping Command Injection

Moxa MAR-2000 firmware version FWRMAR2000V1.0Build15010909 contains a command injection in scenario ping conditions. An authenticated administrator can save a crafted parameter that the scheduled PingThread executes through a shell. https://packetstorm.news/download/238064...

Moxa MAR-2000 FWR_MAR2000_V1.0_Build_15010909 IPsec Command Injection

Moxa MAR-2000 firmware version FWRMAR2000V1.0Build15010909 contains an authenticated IPsec tunnel address command injection vulnerability. The supplied proof of concept stores a shell command in the local VPN address field through the management REST interface...

Moxa MAR-2000 FWR_MAR2000_V1.0_Build_15010909 Executer Program Argument Command Injection

Moxa MAR-2000 version FWRMAR2000V1.0Build15010909 contains an authenticated command injection in the Executer program table argument field. The proof of concept uploads a benign script, stores a crafted argument, and activates the program. https://packetstorm.news/download/238062...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers . An authenticated remote attacker with low privileges can exploit insufficient bounds checking of user-supplied input to make the web management service unresponsive. To re...

EUVD-2026-110697

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

CVE-2026-111459

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459 Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459

An improper certificate validation vulnerability exists in the Moxa Remote Connect Suite (MRC Client) . An unauthenticated attacker with on-path access to the communication between the MRC Client and its server can impersonate a trusted server. This allows for a man-in-the-middle (MITM) attack , ...

EUVD-2026-110617

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

PT-2026-126329

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

PT-2026-125885

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

Moxa Remote Connect Suite encryption issue vulnerability

Versions 1.0.0 through 4.2.0 of the Moxa Remote Connect Suite contain an encryption vulnerability stemming from improper certificate validation. This vulnerability may allow unauthenticated attackers with access to the communication path between the MRC Client and the server to impersonate a...

Moxa NPort W2150A-W4/W2250A-W4 series buffer error vulnerability

Versions 1.0 through 1.5 of the Moxa NPort W2150A-W4/W2250A-W4 series contain a buffer error vulnerability. This vulnerability stems from insufficient boundary checks on user input in the web management interface, leading to a stack buffer overflow. It may allow authenticated remote attackers wit...

Moxa OnCell G3150A-LTE Series command injection vulnerability

The Moxa OnCell G3150A-LTE Series version 1.0.0 contains a command injection vulnerability. This vulnerability stems from insufficient input validation in the SMS management functionality, potentially allowing remote attackers with appropriate privileges to execute arbitrary commands...

Moxa AIG-302 ThingsPro Edge

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure...

CVE-2026-109813

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications...