Vulnerability in Moxa Nport 6100-G2/6200-G2 Series
CVE-2025-2026
The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null byte injection through the device’s web API. This may lead to an unexpected device reboot and result in a denial-of-service (DoS) condition. An authenticated remote attacker with web read-only privileges can exploit the vulnerable API to inject malicious input. Successful exploitation may cause the device to reboot, disrupting normal operations and causing a temporary denial of service.
EPSS: 0.004 (30.4th percentile) — read the EPSS interpretation.
Affected products
- Moxa Nport 6100-g2/6200-g2 Series — versions 1.0.0, 1.1.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@moxa.com (vendor-advisory)
Frequently asked questions
- What is CVE-2025-2026?
- CVE-2025-2026 is a vulnerability in Moxa Nport 6100-G2/6200-G2 Series, classified under Improper Null Termination. Published 2025-12-31.
- Is CVE-2025-2026 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.