CVE-2025-0415

CWE-78 — OS Command Injection3 documents3 sources
Severity
9.2CRITICAL
EPSS
0.8%
top 26.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Moxa Edf-g1002-bp SeriesMoxa Edr-8010 SeriesMoxa Edr-810 Series+5 more
Timeline
PublishedApr 2

Description

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H

Affected Packages8 packages

▶CVEListV5moxa/edr-810_series1.0 — 5.12.39
▶CVEListV5moxa/nat-102_series1.0 — 3.15
▶CVEListV5moxa/tn-4900_series1.0 — 3.14
▶CVEListV5moxa/edr-8010_series1.0 — 3.14
▶CVEListV5moxa/edr-g9004_series1.0 — 3.14

🔴Vulnerability Details

2
CVEList
Command Injection in NTP Setting↗2025-04-02
▶
GHSA
GHSA-mpp3-j837-w9p4: A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settin↗2025-04-02
▶