Moxa TN-4900 Series
16 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-6950 | 1.0 – 3.14 | An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a h | CRITICAL 9.9 | 0.6 % | ||
| CVE-2025-6949 | 1.0 – 3.14 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical aut | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-6894 | 1.0 – 3.14 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the | MEDIUM 5.3 | 0.6 % | ||
| CVE-2025-6893 | 1.0 – 3.14 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in brok | CRITICAL 9.3 | 0.7 % | ||
| CVE-2025-6892 | 1.0 – 3.14 | An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentica | HIGH 8.7 | 0.5 % | ||
| CVE-2025-0676 | | Commend Injection Leading to Privilege Escalation | HIGH 8.6 | 1.0 % | ||
| CVE-2025-0415 | | Command Injection in NTP Setting | CRITICAL 9.2 | 0.5 % | ||
| CVE-2024-9140 | | Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulne | CRITICAL 9.3 | 1.8 % | ||
| CVE-2024-9138 | | Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances | HIGH 8.6 | 1.1 % | ||
| CVE-2024-9139 | | OS Command Injection in Restricted Command | HIGH 8.6 | 1.4 % | ||
| CVE-2024-9137 | | Moxa Service Missing Authentication for Critical Function | HIGH 8.8 | 0.5 % | ||
| CVE-2023-34217 | 1.0 – 1.2.4 | Second Order Command-injection Vulnerability in the Certificate-delete Function | HIGH 8.1 | 0.4 % | ||
| CVE-2023-34216 | 1.0 – 1.2.4 | Second Order Command-injection Vulnerability in the Key-delete Function | HIGH 8.1 | 0.7 % | ||
| CVE-2023-34214 | 1.0 – 1.2.4 | Second Order Command-injection Vulnerability in the Certificate-generation Function | CRITICAL 9.8 | 0.4 % | ||
| CVE-2023-33239 | 1.0 – 1.2.4 | Second Order Command-injection Vulnerability in the Key-generation Function | CRITICAL 9.8 | 1.3 % | ||
| CVE-2023-33238 | 1.0 – 1.2.4 | Command-injection Vulnerability in Certificate Management | CRITICAL 9.8 | 0.8 % |