CVE-2022-3088
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12,...
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
- Record
CVE-2022-3088- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-250
- Updated
- 2026-11-02
EUVDEUVD-2022-42517
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
- Record
EUVD-2022-42517- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-pw2f-v4vr-xg8w
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12,...
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
- Record
GHSA-pw2f-v4vr-xg8w- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-250, CWE-269
- Updated
- 2026-11-02
NVD
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
- Record
CVE-2022-3088- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-250, CWE-269
- Updated
- 2026-11-02
Affected products
- moxa aig-300 system image
- moxa da-662c-16-lx (glb) system image
- moxa uc-2100 system image
- moxa uc-2100-w system image
- moxa uc-3100 system image
- moxa uc-5100 system image
- moxa uc-8100 system image
- moxa uc-8100-me-t system image
- moxa uc-8200 system image
- moxa uc-8410a with debian 9 system image
- moxa uc-8540 with debian 9 system image
- moxa uc-8580 with debian 9 system image
Show 65 moreShow less
- moxa aig-301-ap-azu-lx firmware
- moxa aig-301-azu-lx firmware
- moxa aig-301-cn-azu-lx firmware
- moxa aig-301-eu-azu-lx firmware
- moxa aig-301-t-ap-azu-lx firmware
- moxa aig-301-t-azu-lx firmware
- moxa aig-301-t-cn-azu-lx firmware
- moxa aig-301-t-eu-azu-lx firmware
- moxa aig-301-t-us-azu-lx firmware
- moxa aig-301-us-azu-lx firmware
- moxa da-662c-16-lx firmware
- moxa uc-2101-lx firmware
- moxa uc-2102-lx firmware
- moxa uc-2102-t-lx firmware
- moxa uc-2104-lx firmware
- moxa uc-2111-lx firmware
- moxa uc-2112-lx firmware
- moxa uc-2114-t-lx firmware
- moxa uc-2116-t-lx firmware
- moxa uc-3101-t-ap-lx firmware
- moxa uc-3101-t-eu-lx firmware
- moxa uc-3101-t-us-lx firmware
- moxa uc-3111-t-ap-lx-nw firmware
- moxa uc-3111-t-ap-lx firmware
- moxa uc-3111-t-eu-lx-nw firmware
- moxa uc-3111-t-eu-lx firmware
- moxa uc-3111-t-us-lx-nw firmware
- moxa uc-3111-t-us-lx firmware
- moxa uc-3121-t-ap-lx firmware
- moxa uc-3121-t-eu-lx firmware
- moxa uc-3121-t-us-lx firmware
- moxa uc-5101-lx firmware
- moxa uc-5101-t-lx firmware
- moxa uc-5102-lx firmware
- moxa uc-5102-t-lx firmware
- moxa uc-5111-lx firmware
- moxa uc-5111-t-lx firmware
- moxa uc-5112-lx firmware
- moxa uc-5112-t-lx firmware
- moxa uc-8100a-me-t system imaage
- moxa uc-8112-lx firmware
- moxa uc-8112-me-t-lx1 firmware
- moxa uc-8112-me-t-lx firmware
- moxa uc-8112a-me-t-lx firmware
- moxa uc-8131-lx firmware
- moxa uc-8132-lx firmware
- moxa uc-8162-lx firmware
- moxa uc-8220-t-lx-ap-s firmware
- moxa uc-8220-t-lx-eu-s firmware
- moxa uc-8220-t-lx-s firmware
- moxa uc-8220-t-lx-us-s firmware
- moxa uc-8220-t-lx firmware
- moxa uc-8410a-lx firmware
- moxa uc-8410a-nw-lx firmware
- moxa uc-8410a-nw-t-lx firmware
- moxa uc-8410a-t-lx firmware
- moxa uc-8540-lx firmware
- moxa uc-8540-t-ct-lx firmware
- moxa uc-8540-t-lx firmware
- moxa uc-8580-lx firmware
- moxa uc-8580-q-lx firmware
- moxa uc-8580-t-ct-lx firmware
- moxa uc-8580-t-ct-q-lx firmware
- moxa uc-8580-t-lx firmware
- moxa uc-8580-t-q-lx firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-3088 is a high vulnerability (CVSS 7.8) in Moxa Aig-300 System Image, published November 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. No source names a fixed version.