CVE-2022-3086: Moxa Uc-2101-Lx Firmware

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.

Affected products

• Moxa Uc-2101-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-2102-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-2104-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-2111-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-2112-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-2114-T-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-2116-T-Lx Firmware: from 1.3, up to and including 1.5
• Moxa Uc-3101-T-Ap-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3101-T-Eu-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3101-T-Us-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3111-T-Ap-Lx-Nw Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3111-T-Ap-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3111-T-Eu-Lx-Nw Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3111-T-Eu-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3111-T-Us-Lx-Nw Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3111-T-Us-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3121-T-Ap-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3121-T-Eu-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-3121-T-Us-Lx Firmware: from 1.2, up to and including 2.0
• Moxa Uc-5101-Lx Firmware: version 1.2 only
• Moxa Uc-5101-T-Lx Firmware: version 1.2 only
• Moxa Uc-5102-Lx Firmware: version 1.2 only
• Moxa Uc-5102-T-Lx Firmware: version 1.2 only
• Moxa Uc-5111-Lx Firmware: version 1.2 only
• Moxa Uc-5111-T-Lx Firmware: version 1.2 only
• and 25 more

Published 2022-12-02. Last modified 2026-06-17.