Full Report
[Control Systems] Moxa security advisory (AV26-1055)
Analysis Summary
# Vulnerability: Moxa AIG-302 Series Industrial Computing Vulnerabilities (CVE-2026-109812, CVE-2026-109813)
**Note:** The Canadian Cyber Centre alert (AV26-1055, dated October 16, 2026) is a brief notice that points to Moxa's advisory. It does not include CVSS scores, CWE classifications, technical details, or exploitation data. Those fields are marked "Not provided" below. Review Moxa's advisory directly before making decisions based on severity.
## CVE Details
- **CVE IDs:** CVE-2026-109812, CVE-2026-109813
- **CVSS Score:** Not provided in source
- **CWE:** Not provided in source
- **Mapping:** The alert does not state which CVE applies to which flaw, or whether they are separate issues.
## Affected Systems
- **Products:** AIG-302 Series (Moxa industrial computing product)
- **Versions:** Prior to and including v1.4.1
- **Configurations:** Not provided in source
## Vulnerability Description
The source does not describe the flaws. Moxa's advisory, titled "CVE-2026-109812, CVE-2026-109813: Vulnerabilities in Industrial Computing Products" (MPSA-262560), is the primary source for technical details. The alert states that Moxa is affected as of October 16, 2026, and that the vulnerable range includes all versions up to v1.4.1.
## Exploitation
- **Status:** Not known from source. The alert does not state that exploitation has been observed or that a public PoC exists.
- **Complexity:** Not provided in source
- **Attack Vector:** Not provided in source
## Impact
- **Confidentiality:** Not provided in source
- **Integrity:** Not provided in source
- **Availability:** Not provided in source
## Remediation
### Patches
- The alert does not name a fixed version. Because the affected range ends at v1.4.1, a fix is likely in a later release, but this must be confirmed in Moxa's advisory.
- Check Moxa's advisory for the fixed firmware version and download it from Moxa's official support channels.
### Workarounds
- None listed in source. Consult Moxa's advisory for vendor-recommended mitigations.
- Until patched, consider general hardening for industrial devices: restrict network access to management interfaces, segment OT networks from IT networks, and limit access to trusted hosts.
## Detection
- **Indicators of compromise:** None provided in source.
- **Detection methods:**
- Inventory all AIG-302 devices and record firmware versions. Flag any at v1.4.1 or earlier.
- Review logs and network traffic to and from AIG-302 devices for unexpected connections or management access.
- Monitor Moxa's security advisory feed for updated guidance.
## References
- Canadian Cyber Centre alert (AV26-1055): hxxps://www[.]cyber[.]gc[.]ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-1055
- Moxa advisory (MPSA-262560): hxxps://www[.]moxa[.]com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products
- Moxa security advisory feed: hxxps://www[.]moxa[.]com/en/rss/moxa-security-advisory