8.6Hoch
CVE-2026-109813Shared Hard-coded Root CA Private Key
Beschreibung
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
Schwachstellentyp (CWE):
CWE-321
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Moxa | AIG-302 Series | 1.0.0 – ≤ 1.4.0, fixed 1.4.1 |