Nrp1302/P Desktop Ip Phone
Approved changes feed: RSS · Atom
cpe:2.3:a:new_rock_technologies:nrp1302/p_desktop_ip_phone:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | New Rock Technologies (b47f78ce-b52f-5e39-948a-025fcf8e9776) |
|---|---|
| Product | Nrp1302/P Desktop Ip Phone (4d64bc2b-4794-535a-8eab-9176699a91d7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0681 |
vulnerable | 2026-06-08 07:02:25.168956 |
New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols
MEDIUM (6.2)
The Cloud MQTT service of the affected products supports wildcard topic
subscription which could allow an attacker to obtain sensitive
information from tapping the service communications.
Published: 2025-01-30T18:53:09.669Z
Updated: 2025-01-30T19:11:58.156Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0680 |
vulnerable | 2026-06-08 07:02:25.168323 |
New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CRITICAL (9.8)
Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.
Published: 2025-01-30T18:50:10.932Z
Updated: 2025-01-30T19:15:29.817Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.