CVE-2025-9963 - CVE House
Back to Database
Status published Critical CVE-2025-9963

Path Traversal

Vulnerability Description

A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can also be compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9963

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • S. Dietz (CyberDanube)

References

More from Novakon

View All →
CVE-2025-9966
Execution with Unnecessary Privileges
High 7.3
CVE-2025-9965
UDP Service Weak Authentication
Critical 9.3
CVE-2025-9964
Weak Authentication for Root User
High 8.6
CVE-2025-9962
Unauthenticated Buffer Overflow
Critical 10

Affected Vendor

Affected Software

P series (P07, P10, P12, P15)
Vulnerable Versions:
P – V2001.A.c518o2

Timeline

Official Publish: September 23rd, 2025
Last Modified: March 31st, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-22

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1565.001 Stored Data Manipulation
Impact