Vulnerability in Moxa NPort W2150A-W4/W2250A-W4 Series

[ Description ]Official description

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

[ Fixes ]Fixes and patches

• Security bulletin: Moxa MPSA-261250Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-, cited by CERT-FR CERTFR-2026-AVI-1393
• Security bulletin: Moxa MPSA-269510Vendor patch or bulletin · CERT-FR · moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-, cited by CERT-FR CERTFR-2026-AVI-1393

[ Advisories ]Government CERT advisories

• CERT-FR27 Oct 2026CERTFR-2026-AVI-1393

  Multiple vulnerabilities in Moxa products Translated from French

  Multiple vulnerabilities have been discovered in Moxa products. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.

  CVE-2026-111460CVE-2026-111459CVE-2026-111461+1 more CVEs
• BSI CERT-Bund26 Oct 2026WID-SEC-2026-4166

  Moxa NPort Wireless Device Servers: Vulnerability allows denial of service Translated from German

  CVE-2026-111548

[ References ]References

• www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-s…