Home / Items
VulnerabilitySeverity 7.5 high
SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
CVE-2026-111461 · CVE Program · October 27, 2026
Summary
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.
From CVE record (written by the reporting organization), quoted as published. Check the source before acting.
Affected products
| Vendor | Product |
|---|---|
| Moxa | OnCell G3150A-LTE Series |
Why it's on these mode pages
- Maritime: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com