Status: UPDATED
| Advisory ID: CVE-2026-15579
Key Details
| CVE | CVE-2026-15579 |
| CVSS Score / Version | 8.8 (High) / CVSS v4.0 |
| Updated | 2026-09-18 |
| Affected products | Moxa TN-4500B Series |
| Classified as | CWE-787 (Out-of-bounds Write) |
| Exploitation prediction (EPSS) | 0.44% probability of exploitation in the next 30 days (36% percentile) -- FIRST.org's EPSS model. |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the authentication process to crash and result in a Denial of Service (DoS) attack. (NVD)
What to Do
Monitor Moxa's web page for any future patch releases.
References