{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amoxaaig_302_series/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:moxa:aig_302_series:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-109812"},{"id":"CVE-2026-109813"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["AIG-302 Series (\u003c= 1.4.1)"],"_cs_severities":["high"],"_cs_tags":["industrial-control-systems","vulnerability","ot-security"],"_cs_type":"advisory","_cs_vendors":["Moxa"],"content_html":"\u003cp\u003eMoxa has issued security advisory MPSA-262560 regarding vulnerabilities CVE-2026-109812 and CVE-2026-109813, which impact the AIG-302 series of industrial computers. These vulnerabilities affect all firmware versions up to and including v1.4.1. The vulnerabilities reside within the industrial computing platform, potentially exposing operational technology (OT) environments to unauthorized access or control if exploited. Given the nature of these industrial devices, successful exploitation could lead to system instability, unauthorized configuration changes, or the potential for lateral movement within a critical infrastructure network. Defenders should prioritize reviewing the vendor advisory and applying firmware updates to remediate these security gaps across their deployed industrial computing fleet.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe AIG-302 series is utilized in industrial automation environments where system uptime and integrity are critical. If these vulnerabilities are successfully exploited, attackers could gain unauthorized influence over the device's functionality, leading to service disruption or potential compromise of the industrial control network. Organizations relying on these devices in manufacturing, energy, or utility sectors are at risk if patches are not applied according to the vendor's guidance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReview the Moxa security advisory MPSA-262560 for specific mitigation details and patch availability.\u003c/li\u003e\n\u003cli\u003eAudit OT environments for the presence of Moxa AIG-302 Series devices and verify firmware versions currently in operation.\u003c/li\u003e\n\u003cli\u003eUpdate all instances of AIG-302 Series hardware to the latest firmware version released by Moxa to remediate CVE-2026-109812 and CVE-2026-109813.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation for industrial gateways to limit exposure to these devices from non-essential internal and external network segments.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-16T16:43:39Z","date_published":"2026-10-16T16:43:39Z","id":"https://feed.craftedsignal.io/briefs/2026-10-moxa-aig-302-vulnerabilities/","summary":"Moxa has disclosed two critical vulnerabilities, CVE-2026-109812 and CVE-2026-109813, affecting the AIG-302 industrial computing series firmware version 1.4.1 and earlier.","title":"Multiple Vulnerabilities in Moxa AIG-302 Industrial Computing Products","url":"https://feed.craftedsignal.io/briefs/2026-10-moxa-aig-302-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:moxa:aig_302_series:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}