Skip to content
Noroxi

Moxa records

292 published records for vendor moxa.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 1%
Pre-auth RCE
30
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

292 records
  • CVE-2016-9361
    60This week

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    CriticalCVSS 9.8WeaponizedEPSS 20%

    moxa · nport 5100 series firmwareFeb 13, 2017

  • CVE-2010-4742
    57Plan

    Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to e

    CriticalCVSS 10.0WeaponizedEPSS 56%

    moxa · activex sdkFeb 18, 2011

  • CVE-2022-40224
    49Plan

    A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.

    HighCVSS 7.5No exploitEPSS 64%

    moxa · sds-3008 firmwareFeb 7, 2023

  • CVE-2010-4741
    45Plan

    Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execut

    CriticalCVSS 9.3WeaponizedEPSS 27%

    moxa · device managerFeb 18, 2011

  • CVE-2021-38454
    45Plan

    Moxa MXview Network Management Software

    CriticalCVSS 10.0No exploitEPSS 15%

    moxa · mxviewOct 12, 2021

  • CVE-2018-19660
    44Plan

    An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw

    HighCVSS 8.8No exploitEPSS 28%

    moxa · nport w2x50a firmwareDec 6, 2018

  • CVE-2017-14459
    43Plan

    An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    moxa · awk-3131a firmwareApr 11, 2018

  • CVE-2017-12128
    42Plan

    An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.

    HighCVSS 7.5No exploitEPSS 40%

    moxa · edr-810 firmwareMay 14, 2018

  • CVE-2016-9369
    42Plan

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    CriticalCVSS 9.8No exploitEPSS 8%

    moxa · nport 5100 series firmwareFeb 13, 2017

  • CVE-2019-5138
    41Plan

    An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.

    CriticalCVSS 9.9No exploitEPSS 5%

    moxa · awk-3131a firmwareFeb 25, 2020

  • CVE-2019-6557
    41Plan

    Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

    CriticalCVSS 9.8No exploitEPSS 5%

    moxa · iks-g6824a firmwareMar 5, 2019

  • CVE-2016-8363
    41Plan

    An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127

    CriticalCVSS 10.0No exploitEPSS 2%

    moxa · oncellg3470a-lte firmwareFeb 13, 2017

  • CVE-2019-9099
    40Plan

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,

    CriticalCVSS 9.8No exploitEPSS 4%

    moxa · mb3170 firmwareMar 11, 2020

  • CVE-2016-5799
    40Plan

    Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempt

    CriticalCVSS 9.8No exploitEPSS 4%

    moxa · oncell g3001 firmwareAug 23, 2016

  • CVE-2021-46560
    40Plan

    The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.

    CriticalCVSS 9.8No exploitEPSS 3%

    moxa · tn-5900 firmwareJan 25, 2022

  • CVE-2020-6989
    40Plan

    In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serve

    CriticalCVSS 9.8No exploitEPSS 3%

    moxa · pt-7528-24tx-hv firmwareMar 24, 2020

  • CVE-2020-23639
    40Plan

    A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to ex

    CriticalCVSS 9.8No exploitEPSS 3%

    moxa · vport 461 firmwareNov 2, 2020

  • CVE-2016-9366
    40Plan

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    CriticalCVSS 9.8No exploitEPSS 3%

    moxa · nport 5100 series firmwareFeb 13, 2017

  • CVE-2016-5792
    40Plan

    SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.

    CriticalCVSS 9.8No exploitEPSS 3%

    moxa · softcmsAug 7, 2016

  • CVE-2020-7007
    40Plan

    In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · eds-g516e firmwareMar 24, 2020

  • CVE-2016-4503
    40Plan

    Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vecto

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · device server web console 5232-n firmwareJul 11, 2016

  • CVE-2021-32976
    40Plan

    Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · nport iaw5150a-6i\/o firmwareApr 1, 2022

  • CVE-2019-6524
    40Plan

    Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dis

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · iks-g6824a firmwareMar 5, 2019

  • CVE-2021-32974
    40Plan

    Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · nport iaw5150a-6i\/o firmwareApr 1, 2022

  • CVE-2020-28144
    40Plan

    Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 S

    CriticalCVSS 9.8No exploitEPSS 2%

    moxa · edr-g903 firmwareFeb 3, 2021