CVE-2025-5191

CVE-2025-5191 is an unquoted search path vulnerability in the SerialInterfaceService.exe utility of Moxa's industrial computers (Windows). A local attacker with limited privileges could exploit this by placing a malicious executable in a higher-priority directory, leading to privilege escalation or persistence with SYSTEM privileges when the service starts. Rated 7.3 HIGH, successful exploitation severely impacts the confidentiality, integrity, and availability of the affected device itself. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.