CVE-2022-3088
highpriority · track · 31EPSS 0.002 · 9 %ileEURUUSEPSS · scored 2026-10-27
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationAIG-300 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationDA-662C-16-LX (GLB) System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-2100 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-2100-W System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-3100 System Imagcisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-5100 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8100 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8100-ME-T System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8100A-ME-T System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8200 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8410A with Debian 9 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8540 with Debian 9 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8580 with Debian 9 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (127)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-22-326-05Moxa Multiple ARM-Based Computers2022-11-22icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could provide an attacker with root privileges and total control of the system.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-3088/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.6116cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05cnnvd
- https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerabilityPatchcnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05enisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan