Approved changes feed: RSS · Atom

cpe:2.3:a:moxa:oncell_g3150a-lte_series:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3150A Lte Series (f7a494d1-6713-5964-bad1-27a7fb8f5d20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111460 vulnerable 2026-11-03 10:16:11.511760 Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Published: 2026-10-27T07:13:51.550Z
Updated: 2026-11-04T15:00:37.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111461 vulnerable 2026-11-03 10:16:11.044247 SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.
Published: 2026-10-27T07:17:01.566Z
Updated: 2026-11-04T15:00:19.372Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.