Unauthenticated Device Registration Vulnerability in MXsecurity Series by Moxa

CVE-2025-9315

What is CVE-2025-9315?

An unauthenticated device registration vulnerability has been discovered in Moxa's MXsecurity Series. This flaw allows a remote attacker to send a specially crafted JSON payload to the device's registration endpoint, potentially leading to unauthorized device registrations without any form of authentication. Although the exploitation does not compromise the confidentiality or availability of the device, it poses risks related to unauthorized modifications. It is crucial for users to remain aware of potential security implications and to apply recommended mitigations as outlined in Moxa's security advisory.

References