Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-111461

SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.

CVSS 4.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Moxa
Products
Oncell G3150a-lte Series
CVE-2026-111460

Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Oncell G3150a-lte Series
CVE-2023-6094

OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials

A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Oncell G3150a-lte Oncell G3150a-lte Firmware
CVE-2023-6093

OnCell G3150A-LTE Series: Clickjacking Vulnerability

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the application.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Oncell G3150a-lte Oncell G3150a-lte Firmware