Multiple Vulnerabilities in Moxa AIG-302 Industrial Computing Products

Moxa has issued security advisory MPSA-262560 regarding vulnerabilities CVE-2026-109812 and CVE-2026-109813, which impact the AIG-302 series of industrial computers. These vulnerabilities affect all firmware versions up to and including v1.4.1. The vulnerabilities reside within the industrial computing platform, potentially exposing operational technology (OT) environments to unauthorized access or control if exploited. Given the nature of these industrial devices, successful exploitation could lead to system instability, unauthorized configuration changes, or the potential for lateral movement within a critical infrastructure network. Defenders should prioritize reviewing the vendor advisory and applying firmware updates to remediate these security gaps across their deployed industrial computing fleet.

Impact

The AIG-302 series is utilized in industrial automation environments where system uptime and integrity are critical. If these vulnerabilities are successfully exploited, attackers could gain unauthorized influence over the device's functionality, leading to service disruption or potential compromise of the industrial control network. Organizations relying on these devices in manufacturing, energy, or utility sectors are at risk if patches are not applied according to the vendor's guidance.

Recommendation

• Review the Moxa security advisory MPSA-262560 for specific mitigation details and patch availability.
• Audit OT environments for the presence of Moxa AIG-302 Series devices and verify firmware versions currently in operation.
• Update all instances of AIG-302 Series hardware to the latest firmware version released by Moxa to remediate CVE-2026-109812 and CVE-2026-109813.
• Implement network segmentation for industrial gateways to limit exposure to these devices from non-essential internal and external network segments.