New Rock Technologies Vulnerabilities and Affected Products
Vulnerabilities associated with MX8G VoIP Gateway.
Products
Clear product- MX8G VoIP Gateway2 vulnerabilities
- NRP1302/P Desktop IP Phone2 vulnerabilities
- OM500 IP-PBX2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-0681MEDIUM | New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching SymbolsThe Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications. CWE-155Jan 30, 2025 | CVSS6.9v4.0 | EPSS0.176% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-0680CRITICAL | New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud. CWE-78Jan 30, 2025 | CVSS9.3v4.0 | EPSS0.609% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |