Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2025-09146 CVE-2025-9966 · GHSA-95hg-hgr3-hcj6

Execution with Unnecessary Privileges

Priority LOW 32

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (comm…

CVSS 4.0HIGH 7.3 Physical High privileges User interaction EPSS 0.00375 Published 2025-09-23 No fix listed CWE-269
TI-2025-09145 CVE-2025-9965 · GHSA-v985-h9j9-wv32

UDP Service Weak Authentication

Priority MEDIUM 41

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 20…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00546 Published 2025-09-23 No fix listed CWE-287
TI-2025-09144 CVE-2025-9964 · GHSA-7f7w-xxrm-q8hm

Weak Authentication for Root User

Priority LOW 37

No password for the root user is set in Novakon P series.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00217 Published 2025-09-23 No fix listed CWE-521
TI-2025-09143 CVE-2025-9963 · GHSA-4whh-r2w5-9vf6

Path traversal in Novakon P series

Priority MEDIUM 40

A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions.

CVSS 4.0CRITICAL 9.4 Local No auth No interaction EPSS 0.00222 Published 2025-09-23 No fix listed CWE-22
Priority HIGH 76

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01168 Published 2025-09-23 No fix listed CWE-120