cyfenced.com →

[ CVE-2026-111460 · Published 27 Oct 2026 ]

Vulnerability in Moxa OnCell G3150A-LTE Series

CVSS 7.7 EPSS <1%1 agency advisoryFix available

[ Description ]Official description

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

[ Fixes ]Fixes and patches

  • Security bulletin: Moxa MPSA-261250Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-, cited by CERT-FR CERTFR-2026-AVI-1393
  • Security bulletin: Moxa MPSA-269510Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-, cited by CERT-FR CERTFR-2026-AVI-1393

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1393

    Multiple vulnerabilities in Moxa products Translated from French

    Multiple vulnerabilities have been discovered in Moxa products. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.

    CVE-2026-111460CVE-2026-111459CVE-2026-111461+1 more CVEs

[ References ]References