CVE-2026-0715: Moxa Uc-1222a Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface.  Access to the bootloader menu does not allow full system takeover or privilege escalation. The bootloader enforces digital signature verification and only permits flashing of Moxa-signed images. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential temporary denial-of-service condition if a valid image is reflashed. Remote exploitation is not possible.

Affected products

  • Moxa Uc-1222a Firmware: up to and including 1.4
  • Moxa Uc-2222a-T-Ap Firmware: up to and including 1.4
  • Moxa Uc-2222a-T-Eu Firmware: up to and including 1.4
  • Moxa Uc-2222a-T-Us Firmware: up to and including 1.4
  • Moxa Uc-2222a-T Firmware: up to and including 1.4
  • Moxa Uc-3420a-T-Lte Firmware: up to and including 1.2
  • Moxa Uc-3424a-T-Lte Firmware: up to and including 1.2
  • Moxa Uc-3430a-T-Lte-Wifi Firmware: up to and including 1.2
  • Moxa Uc-3434a-T-Lte-Wifi Firmware: up to and including 1.2
  • Moxa Uc-4410a-T Firmware: up to and including 1.3
  • Moxa Uc-4414a-I-T Firmware: up to and including 1.3
  • Moxa Uc-4430a-T Firmware: up to and including 1.3
  • Moxa Uc-4434a-I-T Firmware: up to and including 1.3
  • Moxa Uc-4450a-T-5g Firmware: up to and including 1.3
  • Moxa Uc-4454a-T-5g Firmware: up to and including 1.3
  • Moxa Uc-8210-T-Lx-S Firmware: up to and including 1.5
  • Moxa Uc-8220-T-Lx-Ap-S Firmware: up to and including 1.5
  • Moxa Uc-8220-T-Lx-Eu-S Firmware: up to and including 1.5
  • Moxa Uc-8220-T-Lx-Us-S Firmware: up to and including 1.5
  • Moxa Uc-8220-T-Lx Firmware: up to and including 1.5
  • Moxa v1202-Ct-T Firmware: up to and including 1.2.0
  • Moxa v1222-Ct-T Firmware: up to and including 1.2.0
  • Moxa v1222-W-Ct-T Firmware: up to and including 1.2.0
  • Moxa v2406c-KL1-Ct-T Firmware: up to and including 1.2
  • Moxa v2406c-KL1-T Firmware: up to and including 1.2
  • and 10 more

Published 2026-02-05. Last modified 2026-06-17.