Get real-time updates on Telegram
CVE-2025-1679: TN-4500A Series 1.0 through 3.13; +3 more affected products
CVE-2025-1679. EPSS 0.00326 (percentile 0.24159), scored 17-Oct-2026.
Affected technology
TN-4500A Series · 1.0 through 3.13
Moxa
TN-5500A Series · 1.0 through 3.13
Moxa
TN-G4500 Series · 1.0 through 5.5
Moxa
TN-G6500 Series · 1.0 through 5.5
Moxa
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Passive user interaction
What an attacker can do
An authenticated administrative attacker can inject malicious scripts to an affected device’s web service that could impact authenticated users interacting with the device’s web interface. Vendor/CNA’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality, integrity and availability impact as none.
- CWE
- CWE-79
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00326 · percentile 0.24159 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 22:50:08.248207+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-1679.html