CVE-2025-9962

CriticalCVSS 10.0

Published: 23/09/2025(UTC)Updated: 26/09/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.11%

65th percentile - higher than 65% of all known CVEs

Summary

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication. This affects P series versions from P – V2001.A.C518o2 up to P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Risk Assessment

An unauthenticated attacker can gain full root privileges on the device, leading to complete system compromise.

Recommendation

Update Novakon P series to a version newer than P-2.0.05 Build 2026.02.06 (commit d0f97fd9) and restrict network access to device interfaces.

Other vulnerabilities in Novakon P series

CVE-2025-9964High
Novakon P series devices do not have a password set for the root user. A physically present attacker can easily log in to the device console.

Original NVD description (English source)

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS