CVE Database
/

CVE-2025-0676

Back to search

CVE-2025-0676

Published: Apr 2, 2025

Modified: Apr 3, 2025

PUBLISHED

Description

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.

VendorProductVersions

Moxa

EDF-G1002-BP Series

affected
1.0 - <= 3.14

Moxa

EDR-810 Series

affected
1.0 - <= 5.12.39

Moxa

EDR-8010 Series

affected
1.0 - <= 3.14

Moxa

EDR-G9004 Series

affected
1.0 - <= 3.14

Moxa

EDR-G9010 Series

affected
1.0 - <= 3.14

Moxa

OnCell G4302-LTE4 Series

affected
1.0 - <= 3.14

Moxa

TN-4900 Series

affected
1.0 - <= 3.14

Moxa

NAT-102 Series

affected
1.0 - <= 3.15

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now