VULNERABILITY INTELLIGENCE
CVE-2025-0415
EPSS probability0.55%
CISA KEVNot currently listed
Published2025-04-02
Last modified2026-06-17
Description
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.
Weakness classification
- psirt@moxa.com: CWE-78