MoxaPass

This is a sample exploit for CVE-2016-9361. It retrieves the SNMP community string and 'admin' password for many kinds of Moxa device. It uses Moxa's UDP/4800 proprietary management protocol. The protocol lacks security, and using the 'unlock' function code does not require a password. This explo...

CVE-2023-5961

This repository contains a Python script and a nuclei template designed to detect vulnerabilities in Moxa ioLogik devices, specifically focusing on the CVE-2023-5961 vulnerability. Additionally, it provides information about the vulnerability and relevant security advisories. Vulnerability...

Moxa AIG-302 sysman Buffer Overflow

The vulnerability in the sysman utility /usr/bin/sysman of the Moxa AIG-302 industrial programmable IIoT gateways is related to the use of a hard-coded cryptographic key. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected...

Moxa AIG-302 Authorization Bypass

The vulnerability in the microprogramming of Moxa’s industrial programmable IIoT gateways, AIG-302, is related to flaws in the authorization process when processing the /api/v1/secrets/ endpoint. Exploitation of this vulnerability could enable a remote attacker to gain unauthorized access to...

Moxa MAR-2000 FWR_MAR2000_V1.0_Build_15010909 Scenario Ping Command Injection

Moxa MAR-2000 firmware version FWRMAR2000V1.0Build15010909 contains a command injection in scenario ping conditions. An authenticated administrator can save a crafted parameter that the scheduled PingThread executes through a shell. https://packetstorm.news/download/238064...

Moxa MAR-2000 FWR_MAR2000_V1.0_Build_15010909 IPsec Command Injection

Moxa MAR-2000 firmware version FWRMAR2000V1.0Build15010909 contains an authenticated IPsec tunnel address command injection vulnerability. The supplied proof of concept stores a shell command in the local VPN address field through the management REST interface...

Moxa MAR-2000 FWR_MAR2000_V1.0_Build_15010909 Executer Program Argument Command Injection

Moxa MAR-2000 version FWRMAR2000V1.0Build15010909 contains an authenticated command injection in the Executer program table argument field. The proof of concept uploads a benign script, stores a crafted argument, and activates the program. https://packetstorm.news/download/238062...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers . An authenticated remote attacker with low privileges can exploit insufficient bounds checking of user-supplied input to make the web management service unresponsive. To re...

EUVD-2026-110697

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

CVE-2026-111459

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459 Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459

An improper certificate validation vulnerability exists in the Moxa Remote Connect Suite (MRC Client) . An unauthenticated attacker with on-path access to the communication between the MRC Client and its server can impersonate a trusted server. This allows for a man-in-the-middle (MITM) attack , ...

CVE-2026-111459 Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

EUVD-2026-110617

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

PT-2026-126329

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become...

Moxa Remote Connect Suite encryption issue vulnerability

Versions 1.0.0 through 4.2.0 of the Moxa Remote Connect Suite contain an encryption vulnerability stemming from improper certificate validation. This vulnerability may allow unauthenticated attackers with access to the communication path between the MRC Client and the server to impersonate a...

PT-2026-125885

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

Moxa NPort W2150A-W4/W2250A-W4 series buffer error vulnerability

Versions 1.0 through 1.5 of the Moxa NPort W2150A-W4/W2250A-W4 series contain a buffer error vulnerability. This vulnerability stems from insufficient boundary checks on user input in the web management interface, leading to a stack buffer overflow. It may allow authenticated remote attackers wit...