CVE-2025-3008 - CERT CVE
ID CVE-2025-3008
Sažetak A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Reference
CVSS
Base: 5.2
Impact: 6.4
Exploitability:5.1
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:A/AC:L/Au:S/C:P/I:P/A:P
Zadnje važnije ažuriranje 01-04-2025 - 20:26
Objavljeno 31-03-2025 - 19:15