Nport W2150A W4/W2250A W4 Series
Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:nport_w2150a-w4/w2250a-w4_series:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Nport W2150A W4/W2250A W4 Series (a4b6f15f-0426-53b6-b01a-b1884dabae13) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10829 |
vulnerable | 2026-07-29 00:23:30.660504 |
Details available
A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.
Published: 2026-06-16T10:18:41.681Z
Updated: 2026-06-16T12:16:54.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10828 |
vulnerable | 2026-07-29 00:23:30.650902 |
Details available
A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems from insufficient input validation and improper handling of externally supplied format strings. An attacker could exploit this vulnerability by sending crafted input to the web service, causing unintended memory disclosure. Successful exploitation may allow an attacker to leak sensitive memory contents and determine critical memory addresses, potentially bypassing Address Space Layout Randomization (ASLR) protections.
Published: 2026-06-16T10:16:12.590Z
Updated: 2026-06-16T12:20:06.556Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.