CVE-2024-1220 — NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability

Description (CNA)

A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by sending crafted payload to the web service. Successful exploitation of the vulnerability could result in denial of service.

Affected (CNA)

Vendor / product	Versions
Moxa / NPort W2150A/W2250A Series	affected 1.0 through 2.3

CWE

CWE-121

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-238975-nport-w2150a-w2250a-series-web-server-stack-based-buffer-overflow-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-238975-nport-w2150a-w2250a-series-web-server-stack-based-buffer-overflow-vulnerability

CISA-ADP

No English description supplied.

No references supplied.