Moxa MAR-2000 firmware ping condition allows command injection
A saved monitoring field is reused by a scheduled ping thread for recurring command execution.
Stories per day · 30 days
4 RSS
Relatedcommand-injection3ics3industrial-router3mar-20003advisory1aig-3021canada1control-systems1cve-2026-1098121cve-2026-1098131firmware1hard-coded-key1ipsec1lte1missing-authorization1mrc1oncell1thingspro1
6 stories, newest first · one card per story
Stories tagged #moxa
Moxa MRC Client and OnCell LTE devices hit by three flaws
Canada's Cyber Centre says MRC Client through v4.2.0 and all OnCell G3150A-LTE firmware are affected, with fixes not named.
Moxa AIG-302 ThingsPro Edge through 1.4.0 can leak keys
An unauthenticated adjacent attacker can abuse a hard-coded key; a logged-in user can read the secrets API.
[Control Systems] Moxa security advisory (AV26-1055)
Canada's Cyber Centre warns Moxa AIG-302 versions through 1.4.1 have two newly listed vulnerabilities.
[Control Systems] Moxa security advisory (AV26-995)
Canada’s Cyber Centre warned that Moxa MGate 3000 and 5000 gateways are affected by two vulnerabilities.
[Control Systems] Moxa security advisory (AV26-938)
Canada's Cyber Centre (AV26-938) warns of out-of-bounds write flaw CVE-2026-15579 in Moxa TN-4500B Series Ethernet switches at or below v2.0.