VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 2, 2025· Updated Jun 17, 2026

CVE-2025-45814

CVE-2025-45814

Description

Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Novelsat/Ns2000 Firmware
    cpe:2.3:o:novelsat:ns2000_firmware:7.02.08:*:*:*:*:*:*:*
  • Novelsat/Ns3000 Firmware2 versions
    cpe:2.3:o:novelsat:ns3000_firmware:7.2.8.124852:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:novelsat:ns3000_firmware:7.2.8.124852:*:*:*:*:*:*:*
    • cpe:2.3:o:novelsat:ns3000_firmware:8.1.1.125110:*:*:*:*:*:*:*
  • NS3000/NS3000description
  • Novelsat/NS3000llm-create
    Range: v8.1.1.125110, v7.2.8.124852, and v7.x
  • Novelsat/NS2000llm-create
    Range: v7.02.08

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.