Vulnerabilities

TI-2025-00575 CVE-2025-0681 · GHSA-34cc-vppq-rvhp

New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

LOW 30

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00178 Published 2025-01-30 No fix listed CWE-155

TI-2025-00574 CVE-2025-0680 · GHSA-p4fv-8hx8-v8cr

OS command injection in New Rock Technologies OM500 IP-PBX

MEDIUM 49

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00639 Published 2025-01-30 No fix listed CWE-78

Vulnerabilities

Filters

New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols

OS command injection in New Rock Technologies OM500 IP-PBX