CCCS relays Moxa's advisory AV26-742 on vulnerabilities in UC, V, VM-1220 (MIL3 v1.1.0 and prior), ioThinx 4530 (MIL3 v2.1 and prior), and AIG series products. If you run these in OT or control systems, review the details and update.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — CISO:If you run Moxa UC, V, VM-1220, ioThinx 4530, or AIG series on plant or OT networks, review advisory AV26-742 for your exact model and version and patch affected units.
What this means for you — Lean IT orgs:Most lean-IT shops do not run Moxa industrial controllers and can skip this. If a facility or vendor you depend on uses them, ask whether they have applied the July 24 updates.
What this means for you — MSP:Inventory client OT and automation estates for Moxa UC, V, VM-1220, ioThinx 4530, and AIG series; schedule patching from AV26-742 for any matches.
What this means for you — Researcher:Moxa’s July 24 advisories cover multiple UC, V, VM-1220 (MIL3 v1.1.0 and prior), ioThinx 4530 (MIL3 v2.1 and prior), and AIG series products—check AV26-742 for CVE detail and version ranges.