← Database

CVE-2025-45814

CRITICAL CVSS: 9.8 Published: 2025-07-02 Modified: 2026-06-17

Description

Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack.

Affected Platforms

Novelsat Ns2000 FirmwareNovelsat Ns2000Novelsat Ns3000 FirmwareNovelsat Ns3000

Weakness Type

CWE-306

References