Moxa MAR-2000 firmware ping condition allows command injection
A saved monitoring field is reused by a scheduled ping thread for recurring command execution.
48
Product
MAR-2000
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenOct 29, 2026
- Last mentioned1d ago
Timeline
3 articles · newest firstMoxa MAR-2000 IPsec route commands allow authenticated injection
Firmware FWR_MAR2000_V1.0_Build_15010909 interpolates a stored VPN address into shell commands run as the model process.
46
Moxa MAR-2000 Executer path allows authenticated command injection
A stored configuration field is built into the shell command that launches an operator program as the model process.
44
Appears with
- 0day Rubbish Research Teamorganization · 3
- Moxa Inc.vendor · 2
- Moxavendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.