important · Firmware
A privileged Moxa MGate administrator can install modified firmware that survives later updates.
Affects
Moxa MGate 3000 and 5000 Series industrial protocol gateways connecting serial and industrial protocols to Ethernet networks.
The path requires high-privilege credentials and access to the gateway’s firmware-update interface.
Detail and 1 source
Improper signature verification permits installation of a crafted image, and its unauthorized changes can persist across subsequent firmware updates.