Execution with Unnecessary Privileges Vulnerability in Moxa Network Security Appliances

CVE-2025-6893

What is CVE-2025-6893?

A flaw has been discovered in Moxa’s network security appliances and routers, specifically within the /api/v1/setting/data endpoint. This vulnerability allows a low-privileged authenticated user to bypass necessary permissions and interact with the API. Such access enables unauthorized users to potentially modify system configuration settings, leading to privilege escalation and unauthorized access to sensitive system configurations.

References