CVE-2026-3867: Medium severity MOXA Secure Router vulnerability
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration file containing the hashed password of the administrative account. Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. Exploitation is only possible under a specific condition — when the configuration file has been exported. This vulnerability does not impact the integrity or availability of the affected product, and no confidentiality, integrity, or availability impact to the subsequent system has been identified.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3867?
CVE-2026-3867 is considered a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2026-3867?
To fix CVE-2026-3867, ensure that proper ownership management is enforced on configuration files to restrict access to low-privileged users.
What kind of exploitation is possible with CVE-2026-3867?
An attacker can exploit CVE-2026-3867 by accessing a configuration file that contains the hashed password of the administrative account.
Who is affected by CVE-2026-3867?
CVE-2026-3867 affects users of Moxa’s Secure Router due to improper ownership management in their system.
What are the potential risks of CVE-2026-3867?
The primary risk of CVE-2026-3867 is unauthorized access to administrative credentials, which could lead to further exploitation of the router.