Moxa Remote Connect Suite Mrc Client
Monthly
Improper certificate validation in Moxa MRC Client 1.0.0 through 4.2.0 allows an unauthenticated attacker who already holds an on-path position between the client and its MRC server to impersonate the trusted server and conduct a man-in-the-middle attack, compromising confidentiality and integrity but not availability. The attack requires that network position and passive user interaction, so it is not a mass-exploitation profile; no public exploit was identified at time of analysis and EPSS is 0.17% (7th percentile). The priority signal is this_week, consistent with a moderate-priority issue rather than an active-exploitation emergency.
Improper certificate validation in Moxa MRC Client 1.0.0 through 4.2.0 allows an unauthenticated attacker who already holds an on-path position between the client and its MRC server to impersonate the trusted server and conduct a man-in-the-middle attack, compromising confidentiality and integrity but not availability. The attack requires that network position and passive user interaction, so it is not a mass-exploitation profile; no public exploit was identified at time of analysis and EPSS is 0.17% (7th percentile). The priority signal is this_week, consistent with a moderate-priority issue rather than an active-exploitation emergency.