This vulnerability involves improper access control on the command interface of Moxa NPort 6000 Series devices. The command port does not verify that a sender is associated with a valid data port session before accepting break signal commands. Consequently, a remote attacker with network access can send specially crafted requests to interrupt serial communication for active user sessions, resulting in a denial-of-service condition. The issue is tracked as CWE-862 (Missing Authorization). The CVSS 4.0 base score is 6.9, indicating medium severity. The affected version explicitly stated is 1.0. There is no vendor advisory or patch information available at this time.

An unauthenticated remote attacker can cause denial of service by disrupting serial communication sessions on affected devices. This impacts availability of the serial communication service but does not indicate direct compromise of confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the command port to trusted sources only to reduce exposure.