CVE-2025-6949

N/A

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.

N/A

带着不必要的权限执行

Moxa多款产品 安全漏洞

MOXA EDF-G1002-BP Series等都是中国摩莎（MOXA）公司的产品。MOXA EDF-G1002-BP Series是一系列高度集成的工业多端口安全路由器。MOXA EDR-8010 Series是一系列工业级安全路由器。Moxa EDR-G9010 Series等都是中国台湾Moxa公司的产品。Moxa EDR-G9010 Series是一系列安全路由器。 Moxa多款产品存在安全漏洞，该漏洞源于API授权缺陷，可能导致低权限用户创建管理员账户，进而获得设备完全控制权。以下产品受到影响

N/A

N/A