8.6Alta
CVE-2026-109813Shared Hard-coded Root CA Private Key
Descripción
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.
Debilidad (CWE):
CWE-321
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Moxa | AIG-302 Series | 1.0.0 – ≤ 1.4.0, fixed 1.4.1 |