Command Injection Vulnerability in Moxa Device Web Interface
CVE-2025-0415

9.2CRITICAL

Key Information:

Vendor

Moxa
Status
Edf-g1002-bp Series
Edr-810 Series
Edr-8010 Series
Edr-g9004 Series
Vendor
CVE Published:
2 April 2025

What is CVE-2025-0415?

This vulnerability allows a remote attacker with web administrator privileges to exploit the web interface of affected Moxa devices. By manipulating the NTP settings, the attacker can execute arbitrary system commands, potentially causing the device to enter an infinite reboot loop. This results in a denial of connectivity for downstream systems that depend on the affected device's network services, severely impacting operations and accessibility.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EDF-G1002-BP Series 1.0 <= 3.14

EDR-8010 Series 1.0 <= 3.14

EDR-810 Series 1.0 <= 5.12.39

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.