Moxa NPort 6100-G2/6200-G2 Series Null Byte Injection Vulnerability Leading to Denial-of-Service

A high-severity null byte injection vulnerability has been identified in the NPort 6100-G2/6200-G2 Series, allowing authenticated remote attackers with web read-only privileges to exploit the device's web API. This exploitation can cause the device to reboot unexpectedly, creating a denial-of-service condition by disrupting normal operations.

Impact

Exploitation of this vulnerability causes the device to reboot, temporarily disrupting normal operations and creating a denial-of-service condition.

Remediation

Users are advised to contact Moxa Technical Support for the security patch (version 1.1.0) to address this vulnerability.