Home / Items
VulnerabilitySeverity 5.3 medium
Moxa NPort W2150A-W4/W2250A-W4 Series
CVE-2026-111548 · CVE Program · October 27, 2026
Summary
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
From CVE record (written by the reporting organization), quoted as published. Check the source before acting.
Affected products
| Vendor | Product |
|---|---|
| Moxa | NPort W2150A-W4/W2250A-W4 Series |
Why it's on these mode pages
- Maritime: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Moxa (network and remote-access gear used in every mode, all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com