{"id":"CVE-2026-111548","title":"A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers","summary":"A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-121"],"vendor":"Moxa","product":"NPort W2150A-W4/W2250A-W4 Series","affected":["nport_w2150a-w4_w2250a-w4_series >= 1.0 <= 1.5"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T10:17:26.193Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111548","references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T16:11:59.281Z","slug":"CVE-2026-111548","body":"## Overview\n\nA stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.\n\n## Affected\n\n- `nport_w2150a-w4_w2250a-w4_series >= 1.0 <= 1.5`\n\n## Remediation\n\nPlease refer to Moxa's security advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}