CVE-2026-0715
An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface. Access to the bootloader menu does not allow full system takeover or privilege escalation. The bootloader enforces digital signature verification and only permits flashing of Moxa-signed images. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential temporary denial-of-service condition if a valid image is reflashed. Remote exploitation is not possible.
- CVSS 4.0
- 7.0 HIGHCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- moxa/uc-1222a firmware · moxa/uc-2222a-t-us firmware · moxa/uc-2222a-t firmware · moxa/uc-2222a-t-ap firmware · moxa/uc-2222a-t-eu firmware · moxa/uc-3434a-t-lte-wifi firmware · moxa/uc-3424a-t-lte firmware · moxa/uc-3420a-t-lte firmware · moxa/uc-3430a-t-lte-wifi firmware · moxa/uc-4450a-t-5g firmware · moxa/uc-4434a-i-t firmware · moxa/uc-4410a-t firmware · moxa/uc-4454a-t-5g firmware · moxa/uc-4414a-i-t firmware · moxa/uc-4430a-t firmware · moxa/uc-8210-t-lx-s firmware · moxa/uc-8220-t-lx-eu-s firmware · moxa/uc-8220-t-lx-ap-s firmware · moxa/uc-8220-t-lx-us-s firmware · moxa/uc-8220-t-lx firmware · +15 more
- Source
- psirt@moxa.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.