This vulnerability (CVE-2026-15579) involves an out-of-bounds write (CWE-787) in the Moxa TN-4500B Series Ethernet switches. The root cause is insufficient validation of the username field length during the web login process, which allows a remote unauthenticated attacker to send a specially crafted long username input. This triggers a buffer overflow that crashes the authentication mechanism, causing a denial of service. The affected versions are >=1.0 and <=2.0. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with high impact on availability. No vendor patch or mitigation details are provided in the input.

Successful exploitation results in denial of service by crashing the authentication process of the affected Ethernet switches. This disrupts normal device operation and network availability. There is no indication of code execution or data breach from the provided information. The vulnerability can be triggered remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the web login interface to trusted networks or IP addresses to reduce exposure. Monitor for unusual login attempts with abnormally long usernames as a potential indicator of exploitation attempts.