CVE-2016-5793: Moxa Active Opc Server

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.

Affected products

• Moxa Active Opc Server: up to and including 2.4.18

Published 2016-09-24. Last modified 2026-06-17.