Skip to content
OpenAdvisories

Vendor

New Rock Technologies

2 known vulnerabilities.

Products

OM500 IP-PBX 2 MX8G VoIP Gateway 2 NRP1302/P Desktop IP Phone 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-0680

    New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

    Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.

    New Rock Technologies MX8G VoIP Gateway OM500 IP-PBX NRP1302/P Desktop IP Phone