WID-SEC-W-2025-0706

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Moxa Router: Mehrere Schwachstellen

view advisory published 2025-04-03

Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen im Moxa Router ausnutzen, um beliebigen Code mit Administratorrechten auszuführen und Root-Rechte zu erlangen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-0676US——
This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject…
CVE-2025-0415US——
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation ma…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan