Novakon P series vulnerabilities

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication. This affects P series versions from P – V2001.A.C518o2 up to P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromised. Affects versions from P-V2001.A.C518o2 to P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Novakon P series devices do not have a password set for the root user. A physically present attacker can easily log in to the device console.