Buffer Overflow Vulnerability in Moxa NPort W2150A/W2250A Series Firmware
CVE-2024-1220

8.2HIGH

Key Information:

Vendor
Moxa
Status
Nport W2150a/w2250a Series
Vendor
CVE Published:
6 March 2024

Summary

The vulnerability relates to a stack-based buffer overflow in the built-in web server of Moxa's NPort W2150A/W2250A Series. This issue exists in firmware versions 2.3 and earlier, allowing remote attackers to send specially crafted payloads to the web service. If successfully exploited, this vulnerability can lead to denial of service, potentially disrupting the normal operation of the affected devices.

Affected Version(s)

NPort W2150A/W2250A Series 1.0 <= 2.3

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vladimir Razov from Positive Technologies
.