CVE-2026-1114617.5High
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
Moxa · OnCell G3150A-LTE Series
Not in CISA KEVVendor fix available
1.4%probability of exploitation in the next 30 days
71st percentile
050100
Higher than 71% of scored CVEs
7.5HighCVSS
LowMediumHighCrit.
DescriptionNVD
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- Moxa discloses three flaws in remote access productsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.