CVE-2025-0676
Commend Injection Leading to Privilege Escalation
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.6EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
02 abr 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Moxa · EDF-G1002-BP SeriesMoxa · EDR-8010 SeriesMoxa · EDR-810 SeriesMoxa · EDR-G9004 SeriesMoxa · EDR-G9010 SeriesMoxa · NAT-102 SeriesMoxa · OnCell G4302-LTE4 SeriesMoxa · TN-4900 SeriesQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →