CVE-2021-39278: Certain MOXA devices allow reflected XSS via the Config Import menu.

Security readout for executives and security teams

CVE-2021-39278 is a reflected cross-site scripting issue in the Config Import menu of listed Moxa wireless and cellular devices. It could let attacker-controlled script run in a user’s browser during management-interface use. The source bundle does not provide CVSS, a vendor fix, or evidence of active exploitation. Exposure is most likely where the listed Moxa device versions are deployed and their web management interfaces are reachable by administrators or broader networks. Internet-facing or weakly segmented management interfaces increase concern. The source bundle does not establish broader product impact beyond the named models and versions. Treat this as an exposure-reduction item for operational technology and network-edge assets, not as confirmed emergency exploitation. Prioritize if affected devices are internet-facing, shared across sensitive networks, or administered by privileged staff through browser-based consoles. Mitigation focus: Identify devices matching the exact Moxa models and firmware versions listed in the CVE.; Check Moxa or authorized vendor guidance for fixed firmware or official mitigations.; Restrict management-interface access to trusted administrative networks only..

Prepared

Jun 2, 2026, 18:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.