7.6Yüksek

CVE-2026-111459Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

Moxa Moxa Remote Connect Suite (MRC Client) Yayım: (7 gün önce)

Açıklama

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.

Zayıflık türü (CWE): CWE-295

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Moxa Moxa Remote Connect Suite (MRC Client) 1.0.0 – ≤ 4.2.0, fixed 4.2.2

Kaynaklar ve yamalar