CVE-2026-109812: AIG-302 Series 1.0.0 through 1.4.0

Affected technology

AIG-302 Series · 1.0.0 through 1.4.0
Moxa

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · Low privileges required · No user interaction required

What an attacker can do

A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as high; integrity and availability impact as none.