CVE-2024-1220: NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-06 · updated 2026-06-17
Weakness: CWE-121

Description

A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by sending crafted payload to the web service. Successful exploitation of the vulnerability could result in denial of service.

Affected products

Moxa Nport W2150A-T Firmware: through 2.3
Moxa Nport W2150A Firmware: through 2.3
Moxa Nport W2250A-T Firmware: through 2.3
Moxa Nport W2250A Firmware: through 2.3

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-238975-nport-w2150a-w2250a-series-web-server-stack-based-buffer-overflow-vulnerability
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-238975-nport-w2150a-w2250a-series-web-server-stack-based-buffer-overflow-vulnerability

Get alerted when CVE-2024-1220 or the next vulnerability affects your stack