Live › vulnerability › CVE-2026-111460
Go to dashboardThe OnCell G3150A-LTE industrial cellular gateway ships with shared cryptographic key material that is the same across devices. An unauthenticated remote attacker who obtains that key can impersonate affected devices and tamper with their management communications.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 08:31 UTC. All times on this page are UTC.
Teams running Moxa OnCell G3150A-LTE Series gateways whose cryptographic keys were never regenerated, so they still use the shared factory key material. Devices whose keys have been regenerated are described as not exposed by the sources. The sources do not say how management traffic is reached, so unknown whether internet-facing deployments are more exposed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.
This page as .md · .json · in your agent: get_signal("CVE-2026-111460")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.