CVE-2025-1679: XSS
Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web service that could impact authenticated users interacting with the device’s web interface. This vulnerability is classified as stored cross-site scripting (XSS); attackers inject malicious scripts into the system, and the scripts persist across sessions. There is no impact to the confidentiality, integrity, and availability of the affected device; no loss of availability within any subsequent systems but has some loss of confidentiality and integrity within the subsequent system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1679?
CVE-2025-1679 is classified as a moderate severity vulnerability due to its potential impact on authenticated users.
How do I fix CVE-2025-1679?
To mitigate CVE-2025-1679, ensure that your Moxa Ethernet Switches are updated to the latest firmware version provided by Moxa.
Who is affected by CVE-2025-1679?
CVE-2025-1679 affects users of Moxa Ethernet Switches who have access to the web interface.
What type of attack is associated with CVE-2025-1679?
CVE-2025-1679 is associated with a cross-site scripting (XSS) attack which can allow an attacker to inject malicious scripts.
What could be the impact of CVE-2025-1679 on an organization?
The impact of CVE-2025-1679 could lead to unauthorized access to sensitive data or actions taken on behalf of authenticated users.