Home / Items
VulnerabilitySeverity 7.7 high
Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
CVE-2026-111460 · CVE Program · October 27, 2026
Summary
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
From CVE record (written by the reporting organization), quoted as published. Check the source before acting.
Affected products
| Vendor | Product |
|---|---|
| Moxa | OnCell G3150A-LTE Series |
Why it's on these mode pages
- Maritime: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com