Command Injection Vulnerability in Moxa Device Web Interface
CVE-2025-0415

9.2CRITICAL

Key Information:

Vendor
Moxa
Status
Edf-g1002-bp Series
Edr-810 Series
Edr-8010 Series
Edr-g9004 Series
Vendor
CVE Published:
2 April 2025

Summary

This vulnerability allows a remote attacker with web administrator privileges to exploit the web interface of affected Moxa devices. By manipulating the NTP settings, the attacker can execute arbitrary system commands, potentially causing the device to enter an infinite reboot loop. This results in a denial of connectivity for downstream systems that depend on the affected device's network services, severely impacting operations and accessibility.

Affected Version(s)

EDF-G1002-BP Series 1.0 <= 3.14

EDR-8010 Series 1.0 <= 3.14

EDR-810 Series 1.0 <= 5.12.39

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.