CVE-2016-2295: Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware...

Security readout for executives and security teams

Certain Moxa MiiNePort embedded device servers can expose sensitive configuration information in cleartext to a remote attacker. The source bundle does not provide CVSS scoring, confirmed exploitation, or a named patch. Organizations using the listed firmware builds should treat internet- or partner-reachable devices as the main business concern. Exposure is most likely in OT, industrial, or embedded network environments using the listed Moxa MiiNePort firmware builds. Risk rises when device management services are reachable from untrusted networks. Prioritize discovery and network exposure reduction. This is not sourced as actively exploited, but cleartext configuration disclosure on industrial connectivity devices can support follow-on compromise or operational disruption if devices are reachable. Mitigation focus: Identify MiiNePort E1, E2, and E3 devices and their firmware builds.; Check Moxa and CISA guidance for fixed firmware or approved workarounds.; Restrict device management access to trusted administrative networks only..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.