Read the docs

Novakon

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Novakon records in CISA KEV

No Novakon vulnerabilities are listed in CISA KEV.

Records

5 records

Priority HIGH 76

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01168 Published 2025-09-23 No fix listed CWE-120
TI-2025-09145 CVE-2025-9965 · GHSA-v985-h9j9-wv32

UDP Service Weak Authentication

Priority MEDIUM 41

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 20…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00546 Published 2025-09-23 No fix listed CWE-287
TI-2025-09143 CVE-2025-9963 · GHSA-4whh-r2w5-9vf6

Path traversal in Novakon P series

Priority MEDIUM 40

A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions.

CVSS 4.0CRITICAL 9.4 Local No auth No interaction EPSS 0.00222 Published 2025-09-23 No fix listed CWE-22
TI-2025-09144 CVE-2025-9964 · GHSA-7f7w-xxrm-q8hm

Weak Authentication for Root User

Priority LOW 37

No password for the root user is set in Novakon P series.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00217 Published 2025-09-23 No fix listed CWE-521
TI-2025-09146 CVE-2025-9966 · GHSA-95hg-hgr3-hcj6

Execution with Unnecessary Privileges

Priority LOW 32

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (comm…

CVSS 4.0HIGH 7.3 Physical High privileges User interaction EPSS 0.00375 Published 2025-09-23 No fix listed CWE-269
Open these records in search →