CVE-2025-0680

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-01-30

Last modified

2025-01-30

Weaknesses

CWE-78

Affected products

• Mx8g Voip Gateway (New Rock Technologies)
• Nrp1302p Desktop Ip Phone (New Rock Technologies)
• Om500 Ip-pbx (New Rock Technologies)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02
• https://www.newrocktech.com/ContactUs/index.html