EN PT-BR
← Voltar ao feed
high

CERT-FR warns of multiple Moxa vulnerabilities in NPort W2150A/W2250A-W4 and Remote Connect Suite (CERTFR-2026-AVI-1393)

1 fonte(s) · 1 atualização(ões) · publicado 26/10/2026 21:00 · coletado há 4 dias

CERT-FR published advisory CERTFR-2026-AVI-1393 on 27 October 2026 covering multiple vulnerabilities in Moxa products. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, remote denial of service and breach of data confidentiality, and the listed impacts also include integrity compromise and security policy bypass. The affected products are the NPort W2150A-W4/W2250A-W4 Series before v1.5.9 and Remote Connect Suite before v4.2.2. The advisory does not report active exploitation and gives no CVSS scores or IOCs.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1393 covers Moxa flaws. CVE-2026-111548 is a stack buffer overflow in the wireless device servers (NPort W2150A-W4/W2250A-W4 Series before v1.5.9). CVE-2026-111459, CVE-2026-111460 and CVE-2026-111461 affect the Moxa Remote Connect Suite MRC Client (before v4.2.2). The advisory lists impacts such as arbitrary code execution, remote denial of service, confidentiality and integrity breach and security policy bypass, but does not map them to individual CVEs, nor give attack prerequisites or CVSS scores. The OnCell G3150A-LTE Series is end of life. Fixes are obtained through Moxa technical support.

Como funciona

The articles do not describe the vulnerable process in detail. For CVE-2026-111548, the Moxa advisory title indicates a stack buffer overflow in the wireless device servers, meaning input handled by the device overflows a fixed-size stack buffer. For the three Remote Connect Suite CVEs, no mechanism is given.

Por que é vulnerável

For CVE-2026-111548 the root cause is a stack buffer overflow, which is a memory-safety error in the wireless device server firmware, as named in the Moxa bulletin title. The articles give no root cause for the Remote Connect Suite CVEs, nor details on why the flaws went unnoticed or what the fix changes.

Como foi descoberta

The articles do not say who found the flaws or how. CERT-FR published its advisory on 27 October 2026, based on Moxa bulletins MPSA-261250 and MPSA-269510 of the same date. The advisory does not report active exploitation.

Explicação gerada por IA a partir da matéria e dos artigos, em 28/10/2026 14:28.

Detalhes técnicos

  • CVEs referenced: CVE-2026-111548 (stack buffer overflow in wireless device servers, Moxa advisory MPSA-261250) and CVE-2026-111459, CVE-2026-111460, CVE-2026-111461 (Moxa Remote Connect Suite MRC Client, Moxa advisory MPSA-269510).
  • Impacts listed: data integrity breach, data confidentiality breach, security policy bypass, remote denial of service, arbitrary code execution.
  • Affected: NPort W2150A-W4/W2250A-W4 Series earlier than v1.5.9; Remote Connect Suite earlier than v4.2.2.
  • The OnCell G3150A-LTE Series is reported as end of life by the vendor.
  • The advisory gives no per-CVE mapping of impacts, attack vectors or severity.

Remediação

  • Per the vendor, contact Moxa technical support to obtain the fix for the NPort W2150A-W4/W2250A-W4 Series and Remote Connect Suite.
  • Consult Moxa security bulletins MPSA-261250 and MPSA-269510 (both dated 27 October 2026) for patches.
  • OnCell G3150A-LTE Series is end of life, so plan its replacement or isolate it.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 26/10/2026 21:00 · coletado 28/10 14:01 primeiro registro

    CERT-FR warns of multiple Moxa vulnerabilities in NPort W2150A/W2250A-W4 and Remote Connect Suite (CERTFR-2026-AVI-1393)

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1393 on 27 October 2026 covering multiple vulnerabilities in Moxa products. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, remote denial of service and breach of data confidentiality, and the listed impacts also include integrity compromise and security policy bypass. The affected products are the NPort W2150A-W4/W2250A-W4 Series before v1.5.9 and Remote Connect Suite before v4.2.2. The advisory does not report active exploitation and gives no CVSS scores or IOCs.

    Technical Details

    • CVEs referenced: CVE-2026-111548 (stack buffer overflow in wireless device servers, Moxa advisory MPSA-261250) and CVE-2026-111459, CVE-2026-111460, CVE-2026-111461 (Moxa Remote Connect Suite MRC Client, Moxa advisory MPSA-269510).
    • Impacts listed: data integrity breach, data confidentiality breach, security policy bypass, remote denial of service, arbitrary code execution.
    • Affected: NPort W2150A-W4/W2250A-W4 Series earlier than v1.5.9; Remote Connect Suite earlier than v4.2.2.
    • The OnCell G3150A-LTE Series is reported as end of life by the vendor.
    • The advisory gives no per-CVE mapping of impacts, attack vectors or severity.

    Remediation

    • Per the vendor, contact Moxa technical support to obtain the fix for the NPort W2150A-W4/W2250A-W4 Series and Remote Connect Suite.
    • Consult Moxa security bulletins MPSA-261250 and MPSA-269510 (both dated 27 October 2026) for patches.
    • OnCell G3150A-LTE Series is end of life, so plan its replacement or isolate it.