PT-2026-31106 · Moxa · Mxgeneralio

Jason Huang · Published 2026-04-08 · Updated 2026-04-13 · CVE-2026-4483

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

AV:N/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Moxa MxGeneralIo (affected versions not specified)

Description A utility, MxGeneralIo, for Moxa’s industrial x86 computers has an exposed IOCTL with insufficient access control. The utility exposes IOCTL methods that allow direct read and write access to MSR and system memory. A local attacker with high privileges could abuse these interfaces to perform unauthorized operations. Successful exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (BSoD) on Windows 10 and 11 systems, leading to a denial-of-service condition. The vulnerability could slightly affect the confidentiality and integrity of the device, but availability might be heavily impacted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-782

Related Identifiers

BDU:2026-05279

CVE-2026-4483

Affected Products

Mxgeneralio

References · 5

• https://bdu.fstec.ru/vul/2026-05279 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-254811-cve-2026-4483-exposed-ioctl-with-insufficient-access-control-vulnerability-in-the-utility-for-x86-computers · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4483 · Security Note
• https://t.me/cveNotify/158428 · Telegram Post
• https://twitter.com/CVEnew/status/2043561056618852693 · Twitter Post