CVE-2025-2026 — Moxa / NPort 6100-G2/6200-G2 Series

Description (CNA)

The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null byte injection through the device’s web API. This may lead to an unexpected device reboot and result in a denial-of-service (DoS) condition. An authenticated remote attacker with web read-only privileges can exploit the vulnerable API to inject malicious input. Successful exploitation may cause the device to reboot, disrupting normal operations and causing a temporary denial of service.

Affected (CNA)

Vendor / product	Versions
Moxa / NPort 6100-G2/6200-G2 Series	affected 1.0.0; unaffected 1.1.0

CWE

CWE-170

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-251731-cve-2025-1977-cve-2025-2026-multiple-vulnerabilities-in-nport-6100-g2-6200-g2-series

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.