OTPulse

Moxa CVE-2026-4483: Exposed IOCTL With Insufficient Access Control Vulnerability in the Utility, MxGeneralIo, for Industrial x86 Computers

MonitorCVSS 7MPSA-254811Apr 8, 2026
MoxaEnergyManufacturing
Summary

CVE-2026-4483 is an exposed IOCTL with insufficient access control vulnerability in the MxGeneralIo utility for Moxa industrial x86 computers. The vulnerability allows a local attacker with high privileges to access IOCTL methods that permit direct read and write operations to system memory and processor model-specific registers (MSR). Exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (Blue Screen of Death) on Windows 10 and Windows 11 systems, leading to denial of service. No patch is currently available from Moxa.

What this means
What could happen
A local attacker with administrative privileges could escalate privileges on Windows 7 or crash the system on Windows 10/11, causing operational downtime. Direct memory and processor access via the vulnerable utility could alter system behavior or halt the industrial computer entirely.
Who's at risk
Energy utilities and manufacturing plants using Moxa industrial x86 computers (such as MXE-201, MXE-211, MXE-301, or similar series) for process control, data acquisition, or edge computing applications should assess their exposure. Any facility where administrative access or privilege escalation on these computers could disrupt operations is at risk.
How it could be exploited
An attacker with local administrative access (or who gains it through other means) can call IOCTL methods exposed by the MxGeneralIo utility to directly read and write to system memory and processor model-specific registers (MSR). This allows them to escalate privileges further on Windows 7, or trigger a system crash on Windows 10/11, disrupting the industrial computer's operation.
Prerequisites
  • Local access to the industrial x86 computer
  • High privilege (administrator-level) credentials or ability to run code with elevated privileges
  • MxGeneralIo utility installed and running
no patch availableaffects industrial control system availabilityrequires high privilege but could enable further privilege escalationhigh CVSS score (7.0)
Exploitability
Unlikely to be exploited — EPSS score 0.0%
Affected products (1)
ProductAffected VersionsFix Status
Industrial x86 ComputersAll versionsNo fix yet
Remediation & Mitigation
0/5
Do now
0/2
HARDENINGRestrict local administrative access on Moxa industrial x86 computers to only authorized personnel and remove unnecessary user accounts with elevated privileges
HARDENINGIf running Windows 7, isolate the industrial x86 computer from untrusted network segments and limit remote access mechanisms to prevent initial compromise
Schedule — requires maintenance window
0/3

Patching may require device reboot — plan for process interruption

HARDENINGMonitor system event logs and crash dumps for unexpected privilege escalation attempts or Blue Screen of Death (BSoD) events that may indicate exploitation attempts
WORKAROUNDEvaluate whether the MxGeneralIo utility is required for production operation; if not, uninstall or disable the utility to eliminate the attack surface
HOTFIXMonitor Moxa security advisories and vendor updates for a future patch to MxGeneralIo; apply any released fix immediately when available
View full Moxa Security advisory
API: /api/v1/advisories/6278b158-9e4a-4394-9200-aa1facdecc7b

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.