Vulnerability-Lookup

WID-SEC-W-2026-1270

Vulnerability from csaf_certbund - Published: 2026-04-26 22:00 - Updated: 2026-04-26 22:00

Summary

Moxa Router (TN-4900, EDR-8010, EDR-G9010, OnCell G4302-LTE4, OnCell G4308-LTE4 und EDF-G1002-BP Series): Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Moxa Router sind Router für industrielle Anwendungen die darauf ausgelegt sind, in anspruchsvollen Umgebungen zuverlässige und sichere Netzwerkkonnektivität zu bieten.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Moxa Router (TN-4900, EDR-8010, EDR-G9010, OnCell G4302-LTE4, OnCell G4308-LTE4 und EDF-G1002-BP Series) ausnutzen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme: - Sonstiges

CVE-2026-3867

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
Moxa Router TN-4900 Series <3.24 Moxa / Router		TN-4900 Series <3.24
Moxa Router EDR-8010 Series <3.24 Moxa / Router		EDR-8010 Series <3.24
Moxa Router OnCell G4308-LTE4 Series <3.24 Moxa / Router		OnCell G4308-LTE4 Series <3.24
Moxa Router EDF-G1002-BP Series <3.24 Moxa / Router		EDF-G1002-BP Series <3.24
Moxa Router EDR-G9010 Series <3.24 Moxa / Router		EDR-G9010 Series <3.24
Moxa Router OnCell G4302-LTE4 Series <3.24 Moxa / Router		OnCell G4302-LTE4 Series <3.24

CVE-2026-3868

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
Moxa Router TN-4900 Series <3.24 Moxa / Router		TN-4900 Series <3.24
Moxa Router EDR-8010 Series <3.24 Moxa / Router		EDR-8010 Series <3.24
Moxa Router OnCell G4308-LTE4 Series <3.24 Moxa / Router		OnCell G4308-LTE4 Series <3.24
Moxa Router EDF-G1002-BP Series <3.24 Moxa / Router		EDF-G1002-BP Series <3.24
Moxa Router EDR-G9010 Series <3.24 Moxa / Router		EDR-G9010 Series <3.24
Moxa Router OnCell G4302-LTE4 Series <3.24 Moxa / Router		OnCell G4302-LTE4 Series <3.24

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.moxa.com/en/support/product-support/s…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Moxa Router sind Router f\u00fcr industrielle Anwendungen die darauf ausgelegt sind, in anspruchsvollen Umgebungen zuverl\u00e4ssige und sichere Netzwerkkonnektivit\u00e4t zu bieten.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Moxa Router (TN-4900, EDR-8010, EDR-G9010, OnCell G4302-LTE4, OnCell G4308-LTE4 und EDF-G1002-BP Series) ausnutzen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1270 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1270.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1270 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1270"
      },
      {
        "category": "external",
        "summary": "Moxa Security Advisories vom 2026-04-26",
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons"
      }
    ],
    "source_lang": "en-US",
    "title": "Moxa Router (TN-4900, EDR-8010, EDR-G9010, OnCell G4302-LTE4, OnCell G4308-LTE4 und EDF-G1002-BP Series): Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-26T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-27T10:09:01.694+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-1270",
      "initial_release_date": "2026-04-26T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-26T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "TN-4900 Series \u003c3.24",
                "product": {
                  "name": "Moxa Router TN-4900 Series \u003c3.24",
                  "product_id": "T053330"
                }
              },
              {
                "category": "product_version",
                "name": "TN-4900 Series 3.24",
                "product": {
                  "name": "Moxa Router TN-4900 Series 3.24",
                  "product_id": "T053330-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:router:tn-4900_series__3.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "EDR-8010 Series \u003c3.24",
                "product": {
                  "name": "Moxa Router EDR-8010 Series \u003c3.24",
                  "product_id": "T053331"
                }
              },
              {
                "category": "product_version",
                "name": "EDR-8010 Series 3.24",
                "product": {
                  "name": "Moxa Router EDR-8010 Series 3.24",
                  "product_id": "T053331-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:router:edr-8010_series__3.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "EDR-G9010 Series \u003c3.24",
                "product": {
                  "name": "Moxa Router EDR-G9010 Series \u003c3.24",
                  "product_id": "T053332"
                }
              },
              {
                "category": "product_version",
                "name": "EDR-G9010 Series 3.24",
                "product": {
                  "name": "Moxa Router EDR-G9010 Series 3.24",
                  "product_id": "T053332-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:router:edr-g9010_series__3.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "OnCell G4302-LTE4 Series \u003c3.24",
                "product": {
                  "name": "Moxa Router OnCell G4302-LTE4 Series \u003c3.24",
                  "product_id": "T053333"
                }
              },
              {
                "category": "product_version",
                "name": "OnCell G4302-LTE4 Series 3.24",
                "product": {
                  "name": "Moxa Router OnCell G4302-LTE4 Series 3.24",
                  "product_id": "T053333-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:router:oncell_g4302-lte4_series__3.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "OnCell G4308-LTE4 Series \u003c3.24",
                "product": {
                  "name": "Moxa Router OnCell G4308-LTE4 Series \u003c3.24",
                  "product_id": "T053334"
                }
              },
              {
                "category": "product_version",
                "name": "OnCell G4308-LTE4 Series 3.24",
                "product": {
                  "name": "Moxa Router OnCell G4308-LTE4 Series 3.24",
                  "product_id": "T053334-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:router:oncell_g4308-lte4_series__3.24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "EDF-G1002-BP Series \u003c3.24",
                "product": {
                  "name": "Moxa Router EDF-G1002-BP Series \u003c3.24",
                  "product_id": "T053335"
                }
              },
              {
                "category": "product_version",
                "name": "EDF-G1002-BP Series 3.24",
                "product": {
                  "name": "Moxa Router EDF-G1002-BP Series 3.24",
                  "product_id": "T053335-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:router:edf-g1002-bp_series__3.24"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Router"
          }
        ],
        "category": "vendor",
        "name": "Moxa"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3867",
      "product_status": {
        "known_affected": [
          "T053330",
          "T053331",
          "T053334",
          "T053335",
          "T053332",
          "T053333"
        ]
      },
      "release_date": "2026-04-26T22:00:00.000+00:00",
      "title": "CVE-2026-3867"
    },
    {
      "cve": "CVE-2026-3868",
      "product_status": {
        "known_affected": [
          "T053330",
          "T053331",
          "T053334",
          "T053335",
          "T053332",
          "T053333"
        ]
      },
      "release_date": "2026-04-26T22:00:00.000+00:00",
      "title": "CVE-2026-3868"
    }
  ]
}

CVE-2026-3867 (GCVE-0-2026-3867)

Vulnerability from cvelistv5 – Published: 2026-04-27 02:54 – Updated: 2026-04-27 15:14

Summary

An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-282 - Improper Ownership Management

Assigner

Moxa

References

1 reference

URL	Tags
https://www.moxa.com/en/support/product-support/s…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Moxa	EDR-8010 Series	Affected: 1.0 , ≤ 3.23 (custom) Unaffected: 3.24 (custom)
Moxa	EDR-G9010 Series	Affected: 1.0 , ≤ 3.23.1 (custom) Affected: 3.24 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3867",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-27T15:14:27.349608Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-27T15:14:35.199Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EDR-8010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.23",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "3.24",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDR-G9010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.23.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.24",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:moxa:edr-8010_series:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.23",
                  "versionStartIncluding": "1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:moxa:edr-8010_series:3.24:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:moxa:edr-g9010_series:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.23.1",
                  "versionStartIncluding": "1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:moxa:edr-g9010_series:3.24:*:*:*:*:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper ownership management vulnerability has been identified in Moxa\u2019s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition \u2014 when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified."
            }
          ],
          "value": "An improper ownership management vulnerability has been identified in Moxa\u2019s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition \u2014 when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-122",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-122: Privilege Abuse"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-282",
              "description": "CWE-282: Improper Ownership Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-27T02:54:00.508Z",
        "orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
        "shortName": "Moxa"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
    "assignerShortName": "Moxa",
    "cveId": "CVE-2026-3867",
    "datePublished": "2026-04-27T02:54:00.508Z",
    "dateReserved": "2026-03-10T07:56:27.311Z",
    "dateUpdated": "2026-04-27T15:14:35.199Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3868 (GCVE-0-2026-3868)

Vulnerability from cvelistv5 – Published: 2026-04-27 02:56 – Updated: 2026-04-27 15:14

Summary

An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive. Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation. While successful exploitation can severely impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

Moxa

References

1 reference

URL	Tags
https://www.moxa.com/en/support/product-support/s…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Moxa	EDR-8010 Series	Affected: 1.0 , ≤ 3.23 (custom) Unaffected: 3.24 (custom)
Moxa	EDR-G9010 Series	Affected: 1.0 , ≤ 3.23.1 (custom) Unaffected: 3.24 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3868",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-27T15:13:55.314280Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-27T15:14:14.677Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EDR-8010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.23",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "3.24",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EDR-G9010 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.23.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "3.24",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:moxa:edr-8010_series:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.23",
                  "versionStartIncluding": "1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:moxa:edr-8010_series:3.24:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:moxa:edr-g9010_series:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.23.1",
                  "versionStartIncluding": "1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:moxa:edr-g9010_series:3.24:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn improper handling of the length parameter inconsistency vulnerability has been identified in Moxa\u2019s Secure Router.\u0026nbsp;Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive.\u0026nbsp;Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation.\u0026nbsp;While successful exploitation can\u0026nbsp;severely\u0026nbsp;impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified.\u003c/p\u003e"
            }
          ],
          "value": "An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa\u2019s Secure Router.\u00a0Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive.\u00a0Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation.\u00a0While successful exploitation can\u00a0severely\u00a0impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-47",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-47: Buffer Overflow via Parameter Expansion"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-130",
              "description": "CWE-130: Improper Handling of Length Parameter Inconsistency",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-27T02:56:34.266Z",
        "orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
        "shortName": "Moxa"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
    "assignerShortName": "Moxa",
    "cveId": "CVE-2026-3868",
    "datePublished": "2026-04-27T02:56:34.266Z",
    "dateReserved": "2026-03-10T07:56:29.470Z",
    "dateUpdated": "2026-04-27T15:14:14.677Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-1270

CVE-2026-3867 (GCVE-0-2026-3867)

CVE-2026-3868 (GCVE-0-2026-3868)

Tags

Sightings

Nomenclature