Moxa Nat-108 Series vulnerabilities

5 CVEs affecting Moxa Nat-108 Series, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6950, published 2025-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-6893, published 2025-10-17. Critical severity, CVSS 9.3. EPSS: 0.7% chance of exploitation in the next 30 days. An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in broken access control has been identified in the…
CVE-2025-6950, published 2025-10-17. Critical severity, CVSS 9.9. EPSS: 0.6% chance of exploitation in the next 30 days. An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for…
CVE-2025-6894, published 2025-10-17. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an…
CVE-2025-6949, published 2025-10-17. Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days. An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated,…
CVE-2025-6892, published 2025-10-17. High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days. An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API…