Moxa says the flaws can be used to bypass user authentication, escalate privileges and gain root access to devices.