Moxa Inc. TN-4900

Name: Moxa Inc. TN-4900
Brand: Moxa Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical2high0medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2008-1160US	critical9.8OT high	14.8% (97th)	Exploit	no fix	2008-03-25	≤ 1.2
CVE-2024-9140US	—	1.76% (78th)	—	no fix	2025-01-03	≤ 3.13
CVE-2024-9139US	—	1.43% (73rd)	—	no fix	2024-10-14	≤ 3.13
CVE-2023-33239US	critical9.8	1.32% (71st)	—	no fix	2023-08-17	≤ 1.2.4
CVE-2024-9138US	—	1.15% (67th)	—	no fix	2025-01-03	≤ 3.14
CVE-2025-0676US	—	1.03% (63rd)	—	no fix	2025-04-02	≤ 3.14
CVE-2023-33238US	critical9.8	0.82% (57th)	—	no fix	2023-08-17	≤ 1.2.4
CVE-2023-34216US	high8.1	0.71% (53rd)	—	no fix	2023-08-17	≤ 1.2.4
CVE-2025-6893US	—	0.66% (51st)	—	no fix	2025-10-17	≤ 3.21
CVE-2025-6950US	—OT elevated	0.60% (48th)	—	no fix	2025-10-17	≤ 3.21
CVE-2025-6894US	—	0.58% (47th)	—	no fix	2025-10-17	≤ 3.21
CVE-2025-0415US	—	0.55% (46th)	—	no fix	2025-04-02	≤ 3.14
CVE-2025-6949US	—	0.52% (44th)	—	no fix	2025-10-17	≤ 3.21
CVE-2025-6892US	—OT elevated	0.51% (44th)	—	no fix	2025-10-17	≤ 3.21
CVE-2024-9137US	—OT elevated	0.50% (43rd)	—	no fix	2024-10-14	≤ 3.13
CVE-2023-34217US	high8.1	0.45% (39th)	—	no fix	2023-08-17	≤ 1.2.4
CVE-2023-34214US	critical9.8	0.44% (38th)	—	no fix	2023-08-17	≤ 1.2.4
CVE-2026-3868US	—	0.37% (31st)	—	no fix	2026-04-27	≤ 3.22
CVE-2026-3867US	—	0.24% (15th)	—	no fix	2026-04-27	≤ 3.22
CVE-2022-41759US	—	—	—	no fix	2022-11-25	≤ 1.0

showing 20 of 22

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-250Execution with Unnecessary Privileges3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-259Use of Hard-coded Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.