CVE-2025-6893

Name of the Vulnerable Software and Affected Versions Moxa network security appliances and routers (affected versions not specified)

Description An issue exists in Moxa network security appliances and routers related to broken access control. A low-privileged authenticated user can access or modify system configuration data through the /api/v1/setting/data API endpoint without the necessary permissions. This can lead to privilege escalation, allowing an attacker to access or modify sensitive system settings. The setting/data endpoint is vulnerable due to insufficient authorization checks. Successful exploitation does not result in loss of confidentiality or integrity in subsequent systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.