CVE-2025-6894
Full vulnerability record from the local CVENow database.
Description
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative `ping` function, which is restricted to higher-privileged roles. This vulnerability enables the user to perform internal network reconnaissance, potentially discovering internal hosts or services that would otherwise be inaccessible. Repeated exploitation could lead to minor resource consumption. While the overall impact is limited, it may result in some loss of confidentiality and availability on the affected device. There is no impact on the integrity of the device, and the vulnerability does not affect any subsequent systems.
Severity
MEDIUM
CVSS score
5.3
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2025-10-17 03:15:36.540000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-6894",
"sourceIdentifier": "[email protected]",
"published": "2025-10-17T03:15:36.540",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative `ping` function, which is restricted to higher-privileged roles. This vulnerability enables the user to perform internal network reconnaissance, potentially discovering internal hosts or services that would otherwise be inaccessible. Repeated exploitation could lead to minor resource consumption. While the overall impact is limited, it may result in some loss of confidentiality and availability on the affected device. There is no impact on the integrity of the device, and the vulnerability does not affect any subsequent systems."
},
{
"lang": "es",
"value": "Una vulnerabilidad de ejecución con privilegios innecesarios ha sido identificada en los dispositivos de seguridad de red y routers de Moxa. Un fallo en la lógica de autorización de la API del dispositivo afectado permite a un usuario autenticado y con bajos privilegios ejecutar la función administrativa 'ping', que está restringida a roles con privilegios más altos. Esta vulnerabilidad permite al usuario realizar reconocimiento de red interno, descubriendo potencialmente hosts o servicios internos que de otro modo serían inaccesibles. La explotación repetida podría llevar a un consumo menor de recursos. Si bien el impacto general es limitado, puede resultar en cierta pérdida de confidencialidad y disponibilidad en el dispositivo afectado. No hay impacto en la integridad del dispositivo, y la vulnerabilidad no afecta a ningún sistema subsiguiente."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Moxa",
"product": "EDR-G9010 Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.14",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21",
"status": "unaffected"
}
]
},
{
"vendor": "Moxa",
"product": "EDR-8010 Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.17",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21",
"status": "unaffected"
}
]
},
{
"vendor": "Moxa",
"product": "EDF-G1002-BP Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.17",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21",
"status": "unaffected"
}
]
},
{
"vendor": "Moxa",
"product": "TN-4900 Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.14",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21",
"status": "unaffected"
}
]
},
{
"vendor": "Moxa",
"product": "NAT-102 Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.17",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21",
"versionType": "custom",
"status": "unaffected"
}
]
},
{
"vendor": "Moxa",
"product": "NAT-108 Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.16",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21",
"status": "unaffected"
}
]
},
{
"vendor": "Moxa",
"product": "OnCell G4302-LTE4 Series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0",
"lessThanOrEqual": "3.13",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.21.0",
"versionType": "custom",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-10-17T13:43:00.660458Z",
"id": "CVE-2025-6894",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-250"
}
]
}
],
"references": [
{
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo",
"source": "[email protected]"
}
]
}