CVE-2026-86326: CWE-347: Improper Verification of Cryptographic Signature in Moxa MGate MB3170 Series
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates.
AI Analysis
Technical Summary
This vulnerability involves improper verification of cryptographic signatures in Moxa MGate MB3170 Series devices. Specifically, the device does not correctly verify the authenticity of firmware images before installation. An attacker who has high privileges and access to the firmware update interface can exploit this by providing a specially crafted or modified firmware image. Successful exploitation enables unauthorized code execution, undermining the device's integrity and availability, and allowing persistent malicious changes through subsequent firmware updates.
Potential Impact
Exploitation allows an attacker with high privileges to execute unauthorized code on the device, compromising its integrity and availability. Malicious modifications can persist across firmware updates, potentially leading to long-term control or disruption of the device.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the firmware update interface to trusted administrators only to reduce risk.
CVE-2026-86326: CWE-347: Improper Verification of Cryptographic Signature in Moxa MGate MB3170 Series
Description
An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provide a specially crafted or modified firmware image, causing it to be installed on the device. Successful exploitation could allow the attacker to execute unauthorized code, compromise the integrity and availability of the device, and persist malicious modifications across subsequent firmware updates.
CVSS v4.0
Score 8.6high
Affected software
Moxa
MGate MB3170 Series
Moxa
MGate MB3270 Series
pkg:github/moxa/mgate-mb3170-seriesRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves improper verification of cryptographic signatures in Moxa MGate MB3170 Series devices. Specifically, the device does not correctly verify the authenticity of firmware images before installation. An attacker who has high privileges and access to the firmware update interface can exploit this by providing a specially crafted or modified firmware image. Successful exploitation enables unauthorized code execution, undermining the device's integrity and availability, and allowing persistent malicious changes through subsequent firmware updates.
Potential Impact
Exploitation allows an attacker with high privileges to execute unauthorized code on the device, compromising its integrity and availability. Malicious modifications can persist across firmware updates, potentially leading to long-term control or disruption of the device.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the firmware update interface to trusted administrators only to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Moxa
- Date Reserved
- 2026-09-07T06:34:04.814Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6abf8f59a43b0b3b89ac0aec
Added to database: 10/02/2026, 11:02:49 UTC
Last enriched: 10/02/2026, 11:16:06 UTC
Last updated: 10/02/2026, 21:52:06 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.