/
← Voltar ao feed
medium

CERT-FR: Multiple vulnerabilities in Moxa AIG-302 Series allow confidentiality and integrity compromise and security policy bypass

1 fonte(s) · 1 atualização(ões) · publicado 15/10/2026 21:00 · coletado há 2 dias

CERT-FR advisory CERTFR-2026-AVI-1327, published 16 October 2026, reports multiple vulnerabilities in the Moxa AIG-302 Series industrial computing products. Per the advisory, some of them allow an attacker to compromise data confidentiality, compromise data integrity and bypass the security policy. The affected versions are all AIG-302 Series firmware releases prior to 1.4.1. The advisory is based on Moxa security bulletin MPSA-262560, which covers CVE-2026-109812 and CVE-2026-109813. It gives no exploitation status, technical root cause, IOCs or attribution.

Detalhes técnicos

  • Impacts listed by CERT-FR: data confidentiality compromise, data integrity compromise, security policy bypass.
  • Affected: AIG-302 Series versions prior to 1.4.1.
  • The advisory does not map the impacts to a specific CVE or give CVSS scores; these are in the Moxa bulletin.

Remediação

  • Consult Moxa security bulletin MPSA-262560 and apply the fixed firmware (1.4.1 or later) to AIG-302 Series devices.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 15/10/2026 21:00 · coletado 21/10 12:01 primeiro registro

    CERT-FR: Multiple vulnerabilities in Moxa AIG-302 Series allow confidentiality and integrity compromise and security policy bypass

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1327, published 16 October 2026, reports multiple vulnerabilities in the Moxa AIG-302 Series industrial computing products. Per the advisory, some of them allow an attacker to compromise data confidentiality, compromise data integrity and bypass the security policy. The affected versions are all AIG-302 Series firmware releases prior to 1.4.1. The advisory is based on Moxa security bulletin MPSA-262560, which covers CVE-2026-109812 and CVE-2026-109813. It gives no exploitation status, technical root cause, IOCs or attribution.

    Technical Details

    • Impacts listed by CERT-FR: data confidentiality compromise, data integrity compromise, security policy bypass.
    • Affected: AIG-302 Series versions prior to 1.4.1.
    • The advisory does not map the impacts to a specific CVE or give CVSS scores; these are in the Moxa bulletin.

    Remediation

    • Consult Moxa security bulletin MPSA-262560 and apply the fixed firmware (1.4.1 or later) to AIG-302 Series devices.