Stack-Based Buffer Overflow in Moxa Wireless Device Servers
CVE-2026-111548

5.3MEDIUM

Key Information:

Vendor

Moxa
Status
Nport W2150a-w4/w2250a-w4 Series
Vendor
CVE Published:
27 October 2026

What is CVE-2026-111548?

A stack-based buffer overflow vulnerability exists in the web management interface of Moxa wireless device servers. This flaw allows an authenticated remote attacker with low privileges to exploit insufficient bounds checking in user-supplied input. Exploitation of this vulnerability can lead to the web management service becoming unresponsive, necessitating power cycling of the device for restoration. Other functionalities of the device remain operational during this time. Organizations utilizing Moxa wireless device servers should assess their exposure and apply necessary mitigations to safeguard their infrastructure.

Affected Version(s)

NPort W2150A-W4/W2250A-W4 Series 1.0 <= 1.5

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.