And others are unconfirmed: "Moxa has not yet been able to validate the buffer overflow and cross-site scripting vulnerabilities that have been identified in the public reporting."