Description
Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| New Rock Technologies | OM500 IP-PBX | All | — |
| New Rock Technologies | MX8G VoIP Gateway | All | — |
| New Rock Technologies | NRP1302/P Desktop IP Phone | All | — |
Advisories 1
- ICSA-25-030-02 New Rock Technologies Cloud Connected Devices CISA ICS & IT advisories · Jan 30, 2025