CVE-2026-111460
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
Moxa OnCell G3150A-LTE SeriesIndustrial & IoT
CVSS
7.7HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
Text from CVE List
Affected versions 1
- OnCell G3150A-LTE Seriesaffected: 1.0.0CVE List