CVE-2025-9962 | A buffer overflow vulnerability in Novakon P series allows a… | CVSS 10.0 CRITICAL

Description

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Metadata

CVE ID: CVE-2025-9962
State: PUBLISHED
Assigner: CyberDanube
Reserved: 2025-09-03 20:34 UTC
Published: 2025-09-23 11:02 UTC
Last updated: 2026-03-31 12:41 UTC
Primary CWE: CWE-120
CWE-120 Buffer Copy without Checking Size of Input ('Classic…
Vendor / Product: Novakon / P series (P07, P10, P12, P15)
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
Novakon	P series (P07, P10, P12, P15)	Linux	P – V2001.A.c518o2 ≤ P-V2005

Weakness (CWE)

CWE	Source	Description
CWE-120	cna	CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References (3)