CVE-2025-45814

Critical CVSS: 9.8

Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack.

Vendor

Novelsat

Product

Ns3000 Firmware

CWE

CWE-306

Yayın Tarihi

2025-07-02 17:15:53

Güncelleme

2025-10-10 19:45:37

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-306 Ns3000 Firmware CRITICAL Novelsat 2025

Referanslar

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45814 https://novelsat.com/