The vulnerability is missing authorization checks on the internal API endpoint /api/v1/secrets/ in Moxa's AIG-302 Series industrial computing products. A low‑privileged attacker who has already authenticated and can reach the device over the local network can read the contents of the endpoint, potentially exposing cryptographic key material and other confidential data. This flaw corresponds to CWE-862 and results in a breach of confidentiality for data stored on or managed by the device.

The issue affects Moxa AIG-302 Series industrial computing products. The CPE strings reference the product series as well as firmware version 1.4.1, indicating that any device running that firmware is susceptible.

The CVSS score of 6.9 indicates medium severity, reflecting the need for local network access and authenticated credentials but providing significant data exposure. No EPSS score is published and the vulnerability is not listed in CISA KEV, suggesting that widespread exploitation has not yet been observed. The likely attack vector is a local attacker who can reach the device’s network and possesses valid credentials; once authenticated, the missing authorization allows retrieval of sensitive information. Patching or configuration changes that enforce proper authorization on the endpoint are required to mitigate the risk.