XSS in Moxa Mgate 5121 Series
CVE-2025-0193
A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the "Login Message" functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user's privileges.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (21.4th percentile) — read the EPSS interpretation.
Affected products
- Moxa Mgate 5121 Series — versions 1.0
- Moxa Mgate 5122 Series — versions 1.0
- Moxa Mgate 5123 Series — versions 1.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@moxa.com (vendor-advisory)
Frequently asked questions
- What is CVE-2025-0193?
- CVE-2025-0193 is a vulnerability in Moxa Mgate 5121 Series, classified under Cross-site Scripting. Published 2025-01-15.
- Is CVE-2025-0193 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.