CVE-2026-1114607.7High
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
Moxa · OnCell G3150A-LTE Series
Not in CISA KEVVendor fix available
0.3%probability of exploitation in the next 30 days
22nd percentile
050100
Higher than 22% of scored CVEs
7.7HighCVSS
LowMediumHighCrit.
DescriptionNVD
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- Moxa discloses three flaws in remote access productsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.