ICSA-25-030-02
·
Published 2025-01-30
·
View on CISA ICS-CERT ↗
New Rock Technologies Cloud Connected Devices
CVSS 9.8
CRITICAL
Risk Summary
Successful exploitation of these vulnerabilities could allow an attacker full control of the device.
CVEs (2)
Remediations
- New Rock Technologies has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of New Rock Technologies Cloud Connected Devices are invited to contact New Rock Technologies customer support for additional information.
Affected Vendors
New Rock Technologies
Affected Products (3)
New Rock Technologies
·
OM500 IP-PBX
vers:all/*
New Rock Technologies
·
MX8G VoIP Gateway
vers:all/*
New Rock Technologies
·
NRP1302/P Desktop IP Phone
vers:all/*
Affected Sectors
Communications, Healthcare and Public Health
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more