Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-3088

Quick assessment

Affected
Moxa UC-8100A-ME-T System Imaage
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MOXA ARM-Based Computers是中国摩莎（MOXA）公司的一系列工业计算机。 MOXA ARM-Based Computers存在安全漏洞，该漏洞源于存在不必要的权限执行，可能允许具有用户级权限的攻击者获得root权限和对系统的完全控制

CVSS 7.8 · High EPSS 0.19% · P9
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-3088

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
带着不必要的权限执行
Source: CVE Program / CVE List V5
Vulnerability Title
MOXA ARM-Based Computers 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MOXA ARM-Based Computers是中国摩莎（MOXA）公司的一系列工业计算机。 MOXA ARM-Based Computers存在安全漏洞，该漏洞源于存在不必要的权限执行，可能允许具有用户级权限的攻击者获得root权限和对系统的完全控制
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Moxa UC-8100A-ME-T System Imaage 1.0 ~ 1.6 -
Moxa UC-2100 System Image 1.0 ~ 1.12 -
Moxa UC-2100-W System Image 1.0 ~ 1.12 -
Moxa UC-3100 System Image 1.0 ~ 1.6 -
Moxa UC-5100 System Image 1.0 ~ 1.4 -
Moxa UC-8100 System Image 3.0 ~ 3.5 -
Moxa UC-8100-ME-T System Image 3.0 ~ 3.1 -
Moxa UC-8200 System Image 1.0 ~ 1.5 -
Moxa AIG-300 System Image 1.0 ~ 1.4 -
Moxa UC-8410A with Debian 9 System Image 4.0.2 and 4.1.2 -
Moxa UC-8580 with Debian 9 System Image 2.0 and 2.1 -
Moxa UC-8540 with Debian 9 System Image 2.0 and 2.1 -
Moxa DA-662C-16-LX (GLB) System Image 1.0.2 ~ 1.1.2 -

II. Public POCs for CVE-2022-3088

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-3088

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-3088 (1)

IV. Related Vulnerabilities

Same vendor: Moxa
Same weakness: CWE-250

V. Comments for CVE-2022-3088

No comments yet

Leave a comment