CVE-2025-0415

published 2025-04-02

CVE-2025-0415: A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings…

Priority P3 57 critical 9.2 CVSS 4.0

AV N AC L AT N PR H UI N VC H VI H VA H SC N SI N SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
moxa	edf-g1002-bp_series	1.0 – 3.14	—
moxa	edr-8010_series	1.0 – 3.14	—
moxa	edr-810_series	1.0 – 5.12.39	—
moxa	edr-g9004_series	1.0 – 3.14	—
moxa	edr-g9010_series	1.0 – 3.14	—
moxa	nat-102_series	1.0 – 3.15	—
moxa	oncell_g4302-lte4_series	1.0 – 3.14	—
moxa	tn-4900_series	1.0 – 3.14	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78