CVE-2025-0676

Commend Injection Leading to Privilege Escalation

State
Published
Severity
8.6 High
Published
Apr 2, 2025
Updated
Apr 3, 2025
Reserved
Jan 23, 2025

Read the record on cve.org

Description

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.

Scores

CVSSScoreVectorSource
4.08.6 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NMoxa

Weaknesses

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

ProductVersions
EDF-G1002-BP SeriesMoxa
  • 1.0 through 3.14Affected
EDR-810 SeriesMoxa
  • 1.0 through 5.12.39Affected
EDR-8010 SeriesMoxa
  • 1.0 through 3.14Affected
EDR-G9004 SeriesMoxa
  • 1.0 through 3.14Affected
EDR-G9010 SeriesMoxa
  • 1.0 through 3.14Affected
OnCell G4302-LTE4 SeriesMoxa
  • 1.0 through 3.14Affected
TN-4900 SeriesMoxa
  • 1.0 through 3.14Affected
NAT-102 SeriesMoxa
  • 1.0 through 3.15Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.