CVE-2025-9964
BaseFortify
Publication date: 2025-09-23
Last updated on: 2026-03-31
Assigner: CyberDanube
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| novakon | iface_rt | * |
| novakon | p_series | v2001.a.c518o2 |
| novakon | pseriesbiosinterface | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-521 | The product does not require that users should have strong passwords. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs because the Novakon P series devices do not have a password set for the root user. This lack of a root password allows physical attackers to easily access the device's console without any authentication.
How can this vulnerability impact me? :
An attacker with physical access to the device can gain unrestricted root access to the system, potentially leading to unauthorized control, data manipulation, or disruption of device operations.
What immediate steps should I take to mitigate this vulnerability?
Set a strong password for the root user on the Novakon P series device to prevent unauthorized physical access to the console.