Approved changes feed: RSS · Atom

cpe:2.3:a:novastar:cx40:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNovastar (c19ba48b-3ec5-5732-a1b4-ef3ac5c191b0)
ProductCx40 (7d4e481e-b346-5cbe-916e-747593e70785)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3008 vulnerable 2026-06-08 07:23:07.785209 Novastar CX40 NetFilter Utility netconfig popen command injection
MEDIUM (5.5)
A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-31T19:00:07.651Z
Updated: 2025-04-01T13:51:44.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3007 vulnerable 2026-06-08 07:23:07.784472 Novastar CX40 NetFilter Utility netconfig getopt stack-based overflow
MEDIUM (5.5)
A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-31T18:31:03.769Z
Updated: 2025-04-01T13:56:20.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.