Novakon vulnerabilities
We track 5 vulnerabilities in Novakon products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2025.
Latest Novakon vulnerabilities
- 7.3 High severity
P series (P07, P10, P12, P15): Improper Privilege Management
Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- 9.3 Critical severity
P series (P07, P10, P12, P15): Improper Authentication
Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- 8.6 High severity
P series (P07, P10, P12, P15): Weak Password Requirements
No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- 9.4 Critical severity
P series (P07, P10, P12, P15): Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can also be compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06
- 10.0 Critical severity
P series (P07, P10, P12, P15): Buffer Copy without Checking Size of Input
A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).