An attacker with physical access to the affected Moxa UC Series devices can initiate a…
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Moxa | UC-8580 Series | V1.1 | — | No fix listed | CNA |
| Moxa | UC-8540 Series | V1.0 to V1.2 | — | No fix listed | CNA |
| Moxa | UC-8410A Series | V2.2 | — | No fix listed | CNA |
| Moxa | UC-8200 Series | V1.0 to V2.4 | — | No fix listed | CNA |
| Moxa | UC-8100A-ME-T Series | V1.0 to V1.1 | — | No fix listed | CNA |
| Moxa | UC-8100 Series | V1.2 | — | No fix listed | CNA |
| Moxa | UC-5100 Series | V1.2 | — | No fix listed | CNA |
| Moxa | UC-3100 Series | V1.2 to V2.0 | — | No fix listed | CNA |
| Moxa | UC-2100 Series | V1.3 to V1.5 | — | No fix listed | CNA |
| Moxa | UC-2100-W Series | V1.3 to V1.5 | — | No fix listed | CNA |
- UC-8580 Series VendorMoxa Affected V1.1 Fixed in — No fix listed CNA
- UC-8540 Series VendorMoxa Affected V1.0 to V1.2 Fixed in — No fix listed CNA
- UC-8410A Series VendorMoxa Affected V2.2 Fixed in — No fix listed CNA
- UC-8200 Series VendorMoxa Affected V1.0 to V2.4 Fixed in — No fix listed CNA
- UC-8100A-ME-T Series VendorMoxa Affected V1.0 to V1.1 Fixed in — No fix listed CNA
- UC-8100 Series VendorMoxa Affected V1.2 Fixed in — No fix listed CNA
- UC-5100 Series VendorMoxa Affected V1.2 Fixed in — No fix listed CNA
- UC-3100 Series VendorMoxa Affected V1.2 to V2.0 Fixed in — No fix listed CNA
- UC-2100 Series VendorMoxa Affected V1.3 to V1.5 Fixed in — No fix listed CNA
- UC-2100-W Series VendorMoxa Affected V1.3 to V1.5 Fixed in — No fix listed CNA
CPE configurations NVD · 109
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:moxa:uc-2101-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2101-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-2102-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2102-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-2102-t-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2102-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-2104-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2104-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-2111-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2111-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
- cpe:2.3:o:moxa:uc-2101-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2101-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-2102-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2102-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-2102-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2102-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-2104-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2104-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-2111-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2111-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
Show 99 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:moxa:uc-2112-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2112-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-2114-t-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:o:moxa:uc-2114-t-lx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2114-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-2116-t-lx_firmware:*:*:*:*:*:*:*:* | 1.3 – 1.5 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-2116-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3101-t-ap-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3101-t-ap-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3101-t-eu-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3101-t-eu-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3101-t-us-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3101-t-us-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3111-t-ap-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3111-t-ap-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3111-t-ap-lx-nw_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3111-t-ap-lx-nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3111-t-eu-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3111-t-eu-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3111-t-eu-lx-nw_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3111-t-eu-lx-nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3111-t-us-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3111-t-us-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3111-t-us-lx-nw_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3111-t-us-lx-nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3121-t-ap-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3121-t-ap-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3121-t-eu-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3121-t-eu-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-3121-t-us-lx_firmware:*:*:*:*:*:*:*:* | 1.2 – 2.0 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-3121-t-us-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5101-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5101-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5101-t-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5101-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5102-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5102-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5102-t-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5102-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5111-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5111-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5111-t-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5111-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5112-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5112-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-5112-t-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-5112-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8112-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8112-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8131-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8131-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8132-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8132-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8162-lx_firmware:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8162-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8112-me-t-lx_firmware:*:*:*:*:*:*:*:* | 1.0 – 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8112-me-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8112-me-t-lx1_firmware:*:*:*:*:*:*:*:* | 1.0 – 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8112-me-t-lx1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8112a-me-t-lx_firmware:*:*:*:*:*:*:*:* | 1.0 – 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8112a-me-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:*:*:*:*:*:*:*:* | 1.0 – 2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8210-t-lx-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8220-t-lx_firmware:*:*:*:*:*:*:*:* | 1.0 – 2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8220-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:*:*:*:*:*:*:*:* | 1.0 – 2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8220-t-lx-ap-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:*:*:*:*:*:*:*:* | 1.0 – 2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8220-t-lx-eu-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8220-t-lx-s_firmware:*:*:*:*:*:*:*:* | 1.0 – 2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8220-t-lx-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:*:*:*:*:*:*:*:* | 1.0 – 2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8220-t-lx-us-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8410a-lx_firmware:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8410a-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8410a-nw-lx_firmware:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8410a-nw-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8410a-nw-t-lx_firmware:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8410a-nw-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8410a-t-lx_firmware:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8410a-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8540-lx_firmware:*:*:*:*:*:*:*:* | 1.0 – 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8540-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8540-t-ct-lx_firmware:*:*:*:*:*:*:*:* | 1.0 – 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8540-t-ct-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8540-t-lx_firmware:*:*:*:*:*:*:*:* | 1.0 – 1.2 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8540-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8580-lx_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8580-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8580-q-lx_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8580-q-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8580-t-ct-lx_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8580-t-ct-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8580-t-ct-q-lx_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8580-t-ct-q-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8580-t-lx_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8580-t-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:uc-8580-t-q-lx_firmware:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:uc-8580-t-q-lx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
- cpe:2.3:o:moxa:uc-2112-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2112-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-2114-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:o:moxa:uc-2114-t-lx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2114-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-2116-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.3 – 1.5 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-2116-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3101-t-ap-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3101-t-ap-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3101-t-eu-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3101-t-eu-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3101-t-us-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3101-t-us-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3111-t-ap-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3111-t-ap-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3111-t-ap-lx-nw_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3111-t-ap-lx-nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3111-t-eu-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3111-t-eu-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3111-t-eu-lx-nw_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3111-t-eu-lx-nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3111-t-us-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3111-t-us-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3111-t-us-lx-nw_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3111-t-us-lx-nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3121-t-ap-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3121-t-ap-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3121-t-eu-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3121-t-eu-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-3121-t-us-lx_firmware:*:*:*:*:*:*:*:* Versions 1.2 – 2.0 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-3121-t-us-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5101-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5101-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5101-t-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5101-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5102-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5102-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5102-t-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5102-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5111-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5111-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5111-t-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5111-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5112-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5112-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-5112-t-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-5112-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8112-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8112-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8131-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8131-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8132-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8132-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8162-lx_firmware:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8162-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8112-me-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8112-me-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8112-me-t-lx1_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8112-me-t-lx1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8112a-me-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8112a-me-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8210-t-lx-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8220-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8220-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8220-t-lx-ap-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8220-t-lx-eu-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8220-t-lx-s_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8220-t-lx-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8220-t-lx-us-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8410a-lx_firmware:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8410a-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8410a-nw-lx_firmware:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8410a-nw-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8410a-nw-t-lx_firmware:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8410a-nw-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8410a-t-lx_firmware:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8410a-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8540-lx_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8540-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8540-t-ct-lx_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8540-t-ct-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8540-t-lx_firmware:*:*:*:*:*:*:*:* Versions 1.0 – 1.2 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8540-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8580-lx_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8580-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8580-q-lx_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8580-q-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8580-t-ct-lx_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8580-t-ct-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8580-t-ct-q-lx_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8580-t-ct-q-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8580-t-lx_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8580-t-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:uc-8580-t-q-lx_firmware:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Moxa
- cpe:2.3:h:moxa:uc-8580-t-q-lx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-1257
- 2026-10-03 Alias added: GHSA-whp2-gjjf-pvgr
References
More Moxa Uc-2101-lx Firmware vulnerabilities
- TI-2022-02849 Improper privilege management in Moxa UC-8100A-ME-T System Imaage CVSS 3.1HIGH 7.8
- TI-2022-02847 Cradlepoint IBR600 Command Injection CVSS 3.1HIGH 7.6
Sources
- CVE-2023-1257 · CVE Program
- CVE-2023-1257 · NVD
- FIRST EPSS
- GHSA-whp2-gjjf-pvgr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences