PT-2026-104201 · Moxa · Mgate Mb3170 Series+1
CVE-2026-86325
·
Published
2026-10-02
·
Updated
2026-10-03
CVSS v4.0
9.4
Critical
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
The product name cannot be determined. (affected versions not specified)
Description
A stack-based buffer overflow occurs in the account management interface of protocol gateways. This issue stems from insufficient length validation of the
account name parameter during the processing of account management requests. An attacker with read-only authentication to the web management interface can provide a specially crafted account name that exceeds the internal stack buffer size, corrupting the program execution flow. This can lead to the disclosure of sensitive information from device memory, such as credentials, the modification of arbitrary memory contents, and the disruption of device availability.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mgate Mb3170 Series
Mgate Mb3270 Series