PT-2025-54287 · Unknown · Serial Device Servers

CVE-2025-15017 · Publicado 2025-12-31 · Atualizado 2025-12-31

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions serial device servers (affected versions not specified)

Description A flaw exists in serial device servers where active debug code is enabled in the UART interface. An attacker with physical access can connect to the UART interface and gain unauthorized access to internal debug functionality without authentication or user interaction. This allows an attacker to execute privileged operations and access sensitive system resources, impacting the confidentiality, integrity, and availability of the device. There is no identified security impact to external or dependent systems. Exploitation is considered low complexity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-489

Identificadores relacionados

BDU:2026-00359

CVE-2025-15017

Produtos afetados

Serial Device Servers

Referências · 7

• https://t.me/CVEtracker/41051 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-15017 · Nota de Segurança
• https://moxa.com/en/support/product-support/security-advisory/mpsa-257331-cve-2025-15017-active-debug-code-vulnerability-in-serial-device-servers · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2006332190452494708 · Publicação no Twitter
• https://t.me/cveNotify/147300 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-00359 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2006353627808408062 · Publicação no Twitter