PT-2025-54288 · Moxa · Nport 6200-G2+2

Paxon Sp Lin · Published 2025-12-31 · Updated 2025-12-31 · CVE-2025-1977

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NPort 6100-G2/6200-G2 Series (affected versions not specified)

Description An authenticated user with read-only access can perform unauthorized configuration changes through the MCC (Moxa CLI Configuration) tool. This occurs due to execution with unnecessary privileges. The issue can be exploited remotely over the network with low attack complexity and requires specific system conditions or configurations. Successful exploitation may lead to changes in device settings, potentially impacting the confidentiality, integrity, and availability of the device. No impact on other systems has been identified. The MCC tool is used for configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2026-00008

CVE-2025-1977

Affected Products

Mcc

Nport 6100-G2

Nport 6200-G2

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-1977 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-251731-cve-2025-1977-cve-2025-2026-multiple-vulnerabilities-in-nport-6100-g2-6200-g2-series · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00008 · Security Note
• https://twitter.com/vuldb/status/2006415080364351895 · Twitter Post
• https://t.me/cveNotify/147302 · Telegram Post
• https://t.me/cveNotify/147301 · Telegram Post
• https://t.me/CVEtracker/41049 · Telegram Post
• https://twitter.com/CVEnew/status/2006332192579035514 · Twitter Post