Host Header Injection Vulnerability in Moxa Ethernet Switches

CVE-2025-1680

What is CVE-2025-1680?

A significant vulnerability has been identified in Moxa's Ethernet switches, allowing attackers with administrative privileges to inject specially crafted Host headers into HTTP requests. This type of Host Header Injection can lead to various security risks, including the potential for redirecting users, forging links, or facilitating phishing attacks. While the vulnerability does not compromise the confidentiality, integrity, or availability of the device itself or related systems, it poses a serious risk for user interactions with web services. Organizations utilizing Moxa Ethernet switches should take immediate action to implement mitigations against this vulnerability.

References