CVE-2025-0415 — Command Injection in NTP Setting

Description (CNA)

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

Affected (CNA)

Vendor / product	Versions
Moxa / EDF-G1002-BP Series	affected 1.0 through 3.14
Moxa / EDR-810 Series	affected 1.0 through 5.12.39
Moxa / EDR-8010 Series	affected 1.0 through 3.14
Moxa / EDR-G9004 Series	affected 1.0 through 3.14
Moxa / EDR-G9010 Series	affected 1.0 through 3.14
Moxa / OnCell G4302-LTE4 Series	affected 1.0 through 3.14
Moxa / TN-4900 Series	affected 1.0 through 3.14
Moxa / NAT-102 Series	affected 1.0 through 3.15

CWE

CWE-78

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-259491-cve-2025-0415-command-injection-leading-to-denial-of-service-(dos)

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.