Use of Hard-coded Credentials in Moxa Network Security Appliances

CVE-2025-6950

What is CVE-2025-6950?

A vulnerability exists in Moxa’s network security appliances and routers due to the use of a hard-coded secret key for signing JSON Web Tokens (JWT) used in user authentication. This implementation flaw permits unauthenticated attackers to forge valid tokens, effectively circumventing existing authentication mechanisms. By exploiting this vulnerability, attackers can impersonate any user, leading to unauthorized access, potential data breach, and complete administrative takeover of the affected devices. Although this does not compromise the confidentiality or integrity of subsequent systems, it poses a significant threat to the affected devices' overall security.

References