CVE-2025-0415
Command Injection in NTP Setting
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Command Injection in NTP Setting
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.
Reserved 2025-01-13 | Published 2025-04-02 | Updated 2025-04-03 | Assigner MoxaCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
www.moxa.com/...injection-leading-to-denial-of-service-(dos)
Support options
