CVE-2025-0676— Commend Injection Leading to Privilege Escalation

Commend Injection Leading to Privilege Escalation

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

tcpdump 操作系统命令注入漏洞

tcpdump是Tcpdump团队的一套运行在命令行下的嗅探工具。该工具主要用于数据包分析和网络流量捕获等。 tcpdump存在安全漏洞，该漏洞源于命令注入，可能导致权限提升和持久控制设备。

N/A

N/A