CISA 2026-10-20

Moxa AIG-302 ThingsPro Edge

Machine-generated analysis · WAYSCloud LLM

Firmware versions 1.4.0 and earlier are affected; Moxa provides a fix in version 1.4.1.

Context

The advisory concerns Moxa AIG-302 ThingsPro Edge devices running firmware version 1.4.0 or earlier. It reports a missing authorization vulnerability in the internal API /api/v1/secrets/ that could allow a privileged attacker on an adjacent network to obtain sensitive information, including cryptographic key material. The product is deployed worldwide in critical manufacturing, energy, and water and wastewater systems. A remediation patch is available in firmware version 1.4.1.

Operator considerations

Check: verify the firmware version on each AIG-302 device.
Patch: apply the v1.4.1 firmware update from Moxa.
Log: monitor access to the /api/v1/secrets/ endpoint and web console authentication events.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.

The following versions of Moxa AIG-302 ThingsPro Edge are affected:

Moxa AIG-302 ThingsPro Edge firmware

Read the full advisory on CISA →