CVE-2026-111548 PUBLISHED

Assigner: Moxa
Reserved: 16.10.2026 Published: 27.10.2026 Updated: 27.10.2026

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS Score: 5.3

Product Status

Vendor Moxa
Product NPort W2150A-W4/W2250A-W4 Series
Versions Default: unaffected
  • affected from 1.0 to 1.5 (incl.)

Solutions

Please refer to Moxa's security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers

References

Problem Types

  • CWE-121: Stack-based Buffer Overflow CWE

Impacts

  • CAPEC-100: Overflow Buffers