Our takeMoxa advisory AV26-1089 covers remote code execution and authentication bypass flaws in Remote Connect Suite (≤v4.2.0) and every firmware version of the OnCell G3150A-LTE Series. Update both immediately if you run them; OT operators of any size should treat this as urgent.Security Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Review and update any Moxa Remote Connect Suite clients (≤v4.2.0) and OnCell G3150A-LTE devices to the latest firmware.
What this means for you — Lean IT orgs:If you use Moxa Remote Connect Suite or OnCell G3150A-LTE devices, check the version and apply the vendor updates as soon as possible.
What this means for you — MSP:Audit client environments for Moxa Remote Connect Suite ≤v4.2.0 and any OnCell G3150A-LTE deployments; schedule and apply the required firmware updates.
What this means for you — Researcher:Moxa released fixes for vulnerabilities affecting Remote Connect Suite ≤v4.2.0 and all OnCell G3150A-LTE firmware versions.