{"schema":"threatline.record/2","record":{"id":"CVE-2026-111548","aliases":[],"summary":"A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insuffic","details":"A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.","categories":["Industrial & IoT"],"product":"NPort W2150A-W4/W2250A-W4 Series","vendor":"Moxa","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-111548","source_modified_at":"2026-10-27T10:17:26.193Z","fetched_at":"2026-10-27T10:24:27.527526Z","product":"NPort W2150A-W4/W2250A-W4 Series","vendor":"Moxa","versions":[{"status":"affected","version":"1.0","lessThanOrEqual":"1.5","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T10:17:26.193Z","modified_at":"2026-10-27T10:17:26.193Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-111548","fetched_at":"2026-10-27T10:24:27.527526Z","source_modified_at":"2026-10-27T10:17:26.193Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261250-cve-2026-111548-stack-buffer-overflow-vulnerability-in-wireless-device-servers","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-27T10:17:26.193Z","content_hash":"3724b0e7797d97cd38e5f22fb63d6a4e9fcccfc5daa8c0925ec15326fc197b38"}}
