What’s Vulnerable › Vulnerabilities

CVE-2026-0715

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-05 · updated 2026-06-17
• Weakness: CWE-522

Description

Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface.  Access to the bootloader menu does not allow full system takeover or privilege escalation. The bootloader enforces digital signature verification and only permits flashing of Moxa-signed images. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential temporary denial-of-service condition if a valid image is reflashed. Remote exploitation is not possible.

Affected products

• Moxa Uc-1222A Firmware: through 1.4
• Moxa Uc-2222A-T-Ap Firmware: through 1.4
• Moxa Uc-2222A-T-Eu Firmware: through 1.4
• Moxa Uc-2222A-T-Us Firmware: through 1.4
• Moxa Uc-2222A-T Firmware: through 1.4
• Moxa Uc-3420A-T-Lte Firmware: through 1.2
• Moxa Uc-3424A-T-Lte Firmware: through 1.2
• Moxa Uc-3430A-T-Lte-Wifi Firmware: through 1.2
• Moxa Uc-3434A-T-Lte-Wifi Firmware: through 1.2
• Moxa Uc-4410A-T Firmware: through 1.3
• Moxa Uc-4414A-I-T Firmware: through 1.3
• Moxa Uc-4430A-T Firmware: through 1.3
• Moxa Uc-4434A-I-T Firmware: through 1.3
• Moxa Uc-4450A-T-5G Firmware: through 1.3
• Moxa Uc-4454A-T-5G Firmware: through 1.3
• Moxa Uc-8210-T-Lx-S Firmware: through 1.5
• Moxa Uc-8220-T-Lx-Ap-S Firmware: through 1.5
• Moxa Uc-8220-T-Lx-Eu-S Firmware: through 1.5
• Moxa Uc-8220-T-Lx-Us-S Firmware: through 1.5
• Moxa Uc-8220-T-Lx Firmware: through 1.5
• Moxa V1202-Ct-T Firmware: through 1.2.0
• Moxa V1222-Ct-T Firmware: through 1.2.0
• Moxa V1222-W-Ct-T Firmware: through 1.2.0
• Moxa V2406C-Kl1-Ct-T Firmware: through 1.2
• Moxa V2406C-Kl1-T Firmware: through 1.2
• Moxa V2406C-Kl3-T Firmware: through 1.2
• Moxa V2406C-Kl5-T Firmware: through 1.2
• Moxa V2406C-Kl7-Ct-T Firmware: through 1.2
• Moxa V2406C-Kl7-T Firmware: through 1.2
• Moxa V2406C-Wl1-Ct-T Firmware: through 1.2

References

• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers

Get alerted when CVE-2026-0715 or the next vulnerability affects your stack