Moxa Remote Connect Suite and OnCell G3150A-LTE Vulnerabilities
Moxa has released security updates addressing three vulnerabilities in the Remote Connect Suite (MRC Client) and the OnCell G3150A-LTE Series.
CVE search metadata
CVE search record: CVE-2026-111459. KEV: no. Product: Remote Connect Suite (MRC Client) (<= v4.2.0). Brief: Moxa Remote Connect Suite and OnCell G3150A-LTE Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-moxa-advisory-f3ecdcaf/
CVE search record: CVE-2026-111460. KEV: no. Product: Remote Connect Suite (MRC Client) (<= v4.2.0). Brief: Moxa Remote Connect Suite and OnCell G3150A-LTE Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-moxa-advisory-f3ecdcaf/
CVE search record: CVE-2026-111461. KEV: no. Product: Remote Connect Suite (MRC Client) (<= v4.2.0). Brief: Moxa Remote Connect Suite and OnCell G3150A-LTE Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-moxa-advisory-f3ecdcaf/
Triage facts
Revision 1- Applicability
- Remote Connect Suite (MRC Client) (<= v4.2.0)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 27, 23:46 UTC
- Vulnerabilities
- 3 CVEs
- Source quality
- B2Roughly even chance
Moxa has issued a security advisory (MPSA-269510) covering vulnerabilities identified as CVE-2026-111459, CVE-2026-111460, and CVE-2026-111461. The issues impact the Moxa Remote Connect Suite (MRC Client) versions up to and including 4.2.0, as well as all firmware versions of the OnCell G3150A-LTE Series. Technical details regarding the exploit path and vulnerability classes remain undisclosed in the vendor advisory. Administrators should monitor the official Moxa security portal for firmware release availability and apply patches as a priority.
Recommendation
- Inventory all deployments of Moxa Remote Connect Suite and OnCell G3150A-LTE Series within the operational technology (OT) and information technology (IT) environment.
- Review the official Moxa security advisory MPSA-269510 to verify if specific firmware updates or mitigations are currently available for the affected versions.
- Restrict network access to the management interfaces of OnCell G3150A-LTE devices to authorized management subnets only until patches are applied.
Immediate actions
Inventory and patch affected Moxa systems upon release of vendor firmware
Threat Hunt
Identify unauthorized access attempts to remote management or configuration interfaces on OnCell G3150A-LTE hardware
Data: Firewall logs, Device audit logs
Mitigations
Isolate affected OnCell G3150A-LTE devices from public internet access
OnCell G3150A-LTE Series