An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UC-8580 Series
Vendor
MOXA
Product
UC-8580 Series
Platforms
Unknown
Default status
Unknown
UC-8580 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.1
affected
Unavailable
Unavailable
Unavailable
None listed
UC-8540 Series
Vendor
MOXA
Product
UC-8540 Series
Platforms
Unknown
Default status
Unknown
UC-8540 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.0 to V1.2
affected
Unavailable
Unavailable
Unavailable
None listed
UC-8410A Series
Vendor
MOXA
Product
UC-8410A Series
Platforms
Unknown
Default status
Unknown
UC-8410A Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V2.2
affected
Unavailable
Unavailable
Unavailable
None listed
UC-8200 Series
Vendor
MOXA
Product
UC-8200 Series
Platforms
Unknown
Default status
Unknown
UC-8200 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.0 to V2.4
affected
Unavailable
Unavailable
Unavailable
None listed
UC-8100A-ME-T Series
Vendor
MOXA
Product
UC-8100A-ME-T Series
Platforms
Unknown
Default status
Unknown
UC-8100A-ME-T Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.0 to V1.1
affected
Unavailable
Unavailable
Unavailable
None listed
UC-8100 Series
Vendor
MOXA
Product
UC-8100 Series
Platforms
Unknown
Default status
Unknown
UC-8100 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.2
affected
Unavailable
Unavailable
Unavailable
None listed
UC-5100 Series
Vendor
MOXA
Product
UC-5100 Series
Platforms
Unknown
Default status
Unknown
UC-5100 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.2
affected
Unavailable
Unavailable
Unavailable
None listed
UC-3100 Series
Vendor
MOXA
Product
UC-3100 Series
Platforms
Unknown
Default status
Unknown
UC-3100 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.2 to V2.0
affected
Unavailable
Unavailable
Unavailable
None listed
UC-2100 Series
Vendor
MOXA
Product
UC-2100 Series
Platforms
Unknown
Default status
Unknown
UC-2100 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V1.3 to V1.5
affected
Unavailable
Unavailable
Unavailable
None listed
UC-2100-W Series
Vendor
MOXA
Product
UC-2100-W Series
Platforms
Unknown
Default status
Unknown
UC-2100-W Series · Scoped product and version facts