Security Resilience

CVE-2023-1257

Moxa Uc-2114-T-Lx Firmware 1.3 – 1.5

Published
07 March 2023
Modified
21 November 2024
CVSS Score v3.1 7.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0032 23th percentile
Risk Priority 53 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-1257 is a high-severity an unspecified weakness vulnerability in Moxa Uc-2114-T-Lx Firmware. Its CVSS base score is 7.6 (High).

Operationally, ranked at the 23th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From…

more

the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.

CWE(s)
None listed

Related Threats

CVEs Like This One

CVE-2026-0714Same product: Moxa Uc-8210-T-Lx-S
CVE-2026-0715Same product: Moxa Uc-8210-T-Lx-S
CVE-2023-5962Same vendor: Moxa
CVE-2023-4204Same vendor: Moxa
CVE-2023-4229Same vendor: Moxa
CVE-2024-6787Same vendor: Moxa
CVE-2024-6786Same vendor: Moxa
CVE-2024-4740Same vendor: Moxa
CVE-2024-4739Same vendor: Moxa
CVE-2023-3336Same vendor: Moxa

Affected Assets

moxa
uc-2101-lx firmware
1.3 — 1.5
moxa
uc-2102-lx firmware
1.3 — 1.5
moxa
uc-2102-t-lx firmware
1.3 — 1.5
moxa
uc-2104-lx firmware
1.3 — 1.5
moxa
uc-2111-lx firmware
1.3 — 1.5
moxa
uc-2112-lx firmware
1.3 — 1.5
moxa
uc-2114-t-lx firmware
all versions · 1.3 — 1.5
moxa
uc-2116-t-lx firmware
1.3 — 1.5
moxa
uc-3101-t-ap-lx firmware
1.2 — 2.0
moxa
uc-3101-t-eu-lx firmware
1.2 — 2.0
+44 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References