CVE-2025-0415: moxa edf-g1002-bp series OS Command Injection

Vulnerability summary

CVE-2025-0415 is a critical (CVSS 9.2) OS Command Injection vulnerability in moxa edf-g1002-bp series. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44.5% of scored vulnerabilities.

Timeline

1. 02-04-2025
   PublishedVulnerability first disclosed.
2. 03-04-2025
   Last modifiedVulnerability information updated.

Description

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

• CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.