CVE-2025-15017

published 2025-12-31

CVE-2025-15017: A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device…

Priority P4 33 high 7 CVSS 4.0

AV P AC L AT N PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device can directly connect to the UART interface and, without authentication, user interaction, or execution conditions, gain unauthorized access to internal debug functionality. Exploitation is low complexity and allows an attacker to execute privileged operations and access sensitive system resources, resulting in a high impact to the confidentiality, integrity, and availability of the affected device. No security impact to external or dependent systems has been identified.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
moxa	nport_5000ai-m12_series	—	—
moxa	nport_5100_series	—	—
moxa	nport_5100a_series	—	—
moxa	nport_5200_series	—	—
moxa	nport_5200a_series	—	—
moxa	nport_5400_series	—	—
moxa	nport_5600-dt_series	—	—
moxa	nport_5600_series	—	—
moxa	nport_ia5000-g2_series	—	—
moxa	nport_ia5000_series	—	—
moxa	nport_ia5000a_series	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-489