{"id":"CVE-2026-111460","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-111460","generatedAt":"2026-10-28T11:21:37.126Z","title":"A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series.","description":"A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.","published":"2026-10-27T08:16:53.000Z","lastModified":"2026-10-27T15:08:51.000Z","status":"Awaiting Analysis","sourceIdentifier":"psirt@moxa.com","cvss":{"version":"4.0","score":7.7,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-321"],"affected":[],"epss":{"score":0.00301,"percentile":0.2269,"date":"2026-10-27","history":[{"date":"2026-10-27","score":0.00301,"percentile":0.2269}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.30%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-27T08:16:53.000Z","detail":{"score":"7.7","severity":"HIGH","publishedAt":"2026-10-27T08:16:53.110Z"},"summary":"New CVE, high severity (CVSS 7.7)."}],"references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client","source":"psirt@moxa.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-111460","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}