This vulnerability (CWE-121) affects Moxa MGate MB3170 Series devices, specifically in the web management interface's account management functionality. The flaw is due to improper validation of the account_name parameter length, allowing a stack-based buffer overflow when an authenticated read-only user submits a crafted account name exceeding the internal buffer size. This overflow can corrupt the program execution flow, potentially enabling an attacker to read sensitive information from device memory, alter arbitrary memory contents, and cause denial of service conditions.

Successful exploitation allows an authenticated read-only user to execute a stack-based buffer overflow, leading to disclosure of sensitive information such as credentials, unauthorized modification of memory, and disruption of device availability. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity with high impact on confidentiality, integrity, and availability.

No explicit patch or remediation is currently documented. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web management interface to trusted users only and monitor for unusual activity from authenticated read-only accounts.