CVE-2025-1680
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-1680
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected device’s web service. This vulnerability is classified as Host Header Injection, where invalid Host headers can manipulate to redirect users, forge links, or phishing attacks. There is no impact to the confidentiality, integrity, and availability of the affected device; no loss of confidentiality, integrity, and availability within any subsequent systems.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在可信数据中接受外来的不可信数据
Source: NVD (National Vulnerability Database)
Vulnerability Title
Moxa Ethernet switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Moxa Ethernet switches是中国台湾Moxa公司的一款工业级网络交换机。 Moxa Ethernet switches存在安全漏洞，该漏洞源于HTTP Host标头注入，可能导致重定向用户、伪造链接或钓鱼。以下产品受到影响：TN-4500A Series、TN-5500A Series、TN-G4500 Series、TN-G6500 Series。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Moxa | TN-4500A Series | 1.0 ~ 3.13 | - | |
| Moxa | TN-5500A Series | 1.0 ~ 3.13 | - | |
| Moxa | TN-G4500 Series | 1.0 ~ 5.5 | - | |
| Moxa | TN-G6500 Series | 1.0 ~ 5.5 | - |
II. Public POCs for CVE-2025-1680
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-1680
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: TN-4500A Series
V. Comments for CVE-2025-1680
No comments yet