CVE-2025-0676

CVE-2025-0676 is a command injection vulnerability found in the tcpdump component of Moxa products. It allows an authenticated attacker with console access to inject and execute arbitrary system commands by exploiting improper input validation. Successful exploitation of this vulnerability can lead to privilege escalation, granting the attacker root shell access and persistent control over the device. This could disrupt network services and affect the availability of downstream systems that rely on the compromised device's connectivity. Moxa has released solutions for the affected products, recommending users update to the latest versions to mitigate the risks.