CVE-2025-1680
Quick assessment
Affected
Moxa TN-4500A Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Moxa Ethernet switches是中国台湾Moxa公司的一款工业级网络交换机。 Moxa Ethernet switches存在安全漏洞，该漏洞源于HTTP Host标头注入，可能导致重定向用户、伪造链接或钓鱼。以下产品受到影响：TN-4500A Series、TN-5500A Series、TN-G4500 Series、TN-G6500 Series。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-1680
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected device’s web service. This vulnerability is classified as Host Header Injection, where invalid Host headers can manipulate to redirect users, forge links, or phishing attacks. There is no impact to the confidentiality, integrity, and availability of the affected device; no loss of confidentiality, integrity, and availability within any subsequent systems.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在可信数据中接受外来的不可信数据
Source: CVE Program / CVE List V5
Vulnerability Title
Moxa Ethernet switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Moxa Ethernet switches是中国台湾Moxa公司的一款工业级网络交换机。 Moxa Ethernet switches存在安全漏洞，该漏洞源于HTTP Host标头注入，可能导致重定向用户、伪造链接或钓鱼。以下产品受到影响：TN-4500A Series、TN-5500A Series、TN-G4500 Series、TN-G6500 Series。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Moxa | TN-4500A Series | 1.0 ~ 3.13 | - |
|
| Moxa | TN-5500A Series | 1.0 ~ 3.13 | - |
|
| Moxa | TN-G4500 Series | 1.0 ~ 5.5 | - |
|
| Moxa | TN-G6500 Series | 1.0 ~ 5.5 | - |
|
II. Public POCs for CVE-2025-1680
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-1680
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: TN-4500A Series
Same vendor: Moxa
-
CVE-2026-15579
某以太网交换机Web登录溢出致DoS -
CVE-2026-10831
Improper Authorization of Break Signal Commands in Devices -
CVE-2026-10829
Moxa NPort W2150A-W4/W2250A-W4 Series 缓冲区错误漏洞 -
CVE-2026-10828
Moxa NPort W2150A-W4/W2250A-W4 Series 格式化字符串错误漏洞 -
CVE-2026-10825
Improper JSON Input Validation in WebSocket API Leads to Den
Same weakness: CWE-349
-
CVE-2026-48100
Payy: agg_agg trailing message slots are unconstrained and a -
CVE-2026-19033
Unauthenticated IXFR deltas are applied to the live zone bef -
CVE-2026-78301
Out-of-zone database nodes can become authoritative zone cut -
CVE-2026-15387
Acceptance of Extraneous Untrusted Data With Trusted Data in -
CVE-2026-54625
django CMS: Page cache ignores plugin-declared Vary headers
V. Comments for CVE-2025-1680
No comments yet