PT-2026-49654 · Moxa · Nport W2150A-W4/W2250A-W4 Series+1

Remi Onno · Publicado 2026-06-16 · Atualizado 2026-06-16 · CVE-2026-10829

Mitre

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.

Correção

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2026-10829

Produtos afetados

Nport W2150A-W4/W2250A-W4 Series

Moxa Nport W2150A/W2250A Series

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-10829 · Nota de Segurança
• https://moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v · Aviso do Fabricante