PT-2025-4000 · New Rock Technologies · Mx8G Voip Gateway+2

Tomer Goldschmidt · Published 2025-01-30 · Updated 2025-01-30 · CVE-2025-0681

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Affected products (affected versions not specified)

Description The Cloud MQTT service of the affected products supports wildcard topic subscription, which could allow an attacker to obtain sensitive information from tapping the service communications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Neutralization of Wildcards

Weakness Enumeration

CWE-155

Related Identifiers

CVE-2025-0681

Affected Products

Mx8G Voip Gateway

Nrp1302/P Desktop Ip Phone

Om500 Ip-Pbx

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0681 · Security Note
• https://twitter.com/CVEnew/status/1885043123669160383 · Twitter Post
• https://newrocktech.com/ContactUs/index.html · Note
• https://t.me/cvedetector/16832 · Telegram Post
• https://t.me/cvenotify/109276 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-030-02 · Note