CVE-2025-1680
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected device’s web service. This vulnerability is classified as Host Header Injection, where invalid Host headers can manipulate to redirect users, forge links, or phishing attacks. There is no impact to the confidentiality, integrity, and availability of the affected device; no loss of confidentiality, integrity, and availability within any subsequent systems.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TN-4500A Series
- Vendor
- Moxa
- Product
- TN-4500A Series
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0 | affected | custom | Unavailable | 3.13 | None listed |
| 4.0 | unaffected | custom | Unavailable | Unavailable | None listed |
TN-5500A Series
- Vendor
- Moxa
- Product
- TN-5500A Series
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0 | affected | custom | Unavailable | 3.13 | None listed |
| 4.0 | unaffected | custom | Unavailable | Unavailable | None listed |
TN-G4500 Series
- Vendor
- Moxa
- Product
- TN-G4500 Series
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0 | affected | custom | Unavailable | 5.5 | None listed |
| 5.5.255 | unaffected | custom | Unavailable | Unavailable | None listed |
TN-G6500 Series
- Vendor
- Moxa
- Product
- TN-G6500 Series
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0 | affected | custom | Unavailable | 5.5 | None listed |
| 5.5.255 | unaffected | custom | Unavailable | Unavailable | None listed |