Description
The Cloud MQTT service of the affected products supports wildcard topic
subscription which could allow an attacker to obtain sensitive
information from tapping the service communications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| New Rock Technologies | OM500 IP-PBX | All | — |
| New Rock Technologies | MX8G VoIP Gateway | All | — |
| New Rock Technologies | NRP1302/P Desktop IP Phone | All | — |
Advisories 1
- ICSA-25-030-02 New Rock Technologies Cloud Connected Devices CISA ICS & IT advisories · Jan 30, 2025