news
Full Disclosure
October 29th, 2026 at 4:12 AM[0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 scenario ping condition command injection through the auto-executing ping thread (7.2)
Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Moxa MAR-2000 series industrial 4G/LTE cellular router, firmware image FWR_MAR2000_V1.0_Build_15010909, from Moxa Inc. (Taiwan). An authenticated administrator converts one saved monitoring-condition field into recurring, product-scheduled arbitrary command execution, because the thread that implements the scenario ping condition builds its command line from the...
#ai
#research
#product
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.11
Engagement proxy: 0
Canonical link: https://seclists.org/fulldisclosure/2026/Oct/55