CVE-2026-111548: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Power cycle the affected device to restore the web management service after it becomes unresponsive.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to reach the device's web management interface and authenticate with a low-privilege account. Unauthenticated attackers are not described as able to exploit it.
What is the operational impact of a successful exploit?
The web management service can become unresponsive. Recovery requires power cycling the affected device, although other device functions remain operational.
What should be monitored to identify possible exploitation?
Monitor for the web management interface becoming unresponsive, particularly following authenticated low-privilege access or submission of malformed input. The available information does not identify any other indicators of compromise.