A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers.
Impact
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
Source excerpt · MoxaRestoring the service requires power cycling the affected device, while other device functions remain operational.
What to do
Please refer to Moxa's security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Moxa · NPort W2150A-W4/W2250A-W4 Series
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 1.0 through 1.5 (inclusive) | affected |
Original source description
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.