CVE-2025-0415

published 2025-04-02

CVE-2025-0415: A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings…

critical 9.2 CVSS 4.0

AV N AC L AT N PR H UI N VC H VI H VA H SC N SI N SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
moxa	edf-g1002-bp_series	1.0 – 3.14	—
moxa	edr-8010_series	1.0 – 3.14	—
moxa	edr-810_series	1.0 – 5.12.39	—
moxa	edr-g9004_series	1.0 – 3.14	—
moxa	edr-g9010_series	1.0 – 3.14	—
moxa	nat-102_series	1.0 – 3.15	—
moxa	oncell_g4302-lte4_series	1.0 – 3.14	—
moxa	tn-4900_series	1.0 – 3.14	—

CWE-78