PT-2026-49654 · Moxa · Nport W2150A-W4/W2250A-W4 Series+1

Remi Onno · Published 2026-06-16 · Updated 2026-06-16 · CVE-2026-10829

Mitre

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-10829

Affected Products

Nport W2150A-W4/W2250A-W4 Series

Moxa Nport W2150A/W2250A Series

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-10829 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v · Vendor Advisory