Active Debug Code Vulnerability in Serial Device Servers by Moxa

CVE-2025-15017

What is CVE-2025-15017?

A security flaw exists in Moxa's serial device servers where active debug functionality is unintentionally left enabled in the UART interface. This oversight allows attackers with physical access to connect to the UART interface and gain unauthorized access without the need for authentication or user interaction. The ease of exploitation makes it a significant security concern, enabling attackers to perform privileged operations and access sensitive system resources, thereby threatening the confidentiality, integrity, and availability of the device in question. It's noteworthy that this flaw does not seem to affect external systems or dependencies.

References