CVE-2026-15579
Quick assessment
Affected
Moxa TN-4500B Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
某些以太网交换机中存在一个越界写（out-of-bounds write）漏洞，原因是 Web 登录处理过程中对用户名字段长度验证不当。该漏洞可能允许远程攻击者提交一个特别长的、精心构造的输入，从而触发缓冲区溢出，导致认证进程崩溃，进而引发拒绝服务（DoS）攻击。
Possible ATT&CK Techniques 2 AI
T1499 · Endpoint Denial of Service T1499.002 · Service Exhaustion FloodAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Moxa | TN-4500B Series | 1.0≤ 2.0 |
affected |
2.1 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-15579
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the authentication process to crash and result in a Denial of Service (DoS) attack.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Moxa | TN-4500B Series | 1.0 ~ 2.0 | - |
|
II. Public POCs for CVE-2026-15579
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15579
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-15579 (1)
IV. Related Vulnerabilities
Same vendor: Moxa
-
CVE-2026-10831
Improper Authorization of Break Signal Commands in Devices -
CVE-2026-10829
Moxa NPort W2150A-W4/W2250A-W4 Series 缓冲区错误漏洞 -
CVE-2026-10828
Moxa NPort W2150A-W4/W2250A-W4 Series 格式化字符串错误漏洞 -
CVE-2026-10825
Improper JSON Input Validation in WebSocket API Leads to Den -
CVE-2026-9266
Moxa UC-1200A Series 加密问题漏洞
Same weakness: CWE-787
-
CVE-2026-94054
Exim 4.100.1前Proxy-Protocol致越界写入 -
CVE-2026-93894
Vinyl Cache 9.0、2 工作区缓冲区溢出致远程拒绝服务 -
CVE-2026-75892
Out of bounds write in PDP ctx GSN-Address decode -
CVE-2026-91142
Cockpit: integer overflow in `do_lastlog()` offset calculati -
CVE-2026-84444
libheif uncompressed tiled image encoding allows out-of-boun
V. Comments for CVE-2026-15579
No comments yet