CVE-2025-3007

Name of the Vulnerable Software and Affected Versions Novastar CX40 versions up to 2.44.0

Description A critical issue affects the getopt function of the /usr/nova/bin/netconfig file in the NetFilter Utility component. The manipulation of the cmd, netmask, pipeout, or nettask arguments leads to a stack-based buffer overflow. The exploit has been publicly disclosed.

Recommendations For Novastar CX40 versions up to 2.44.0, as a temporary workaround, consider disabling the getopt function in the /usr/nova/bin/netconfig file until a patch is available. Restrict access to the NetFilter Utility component to minimize the risk of exploitation. Avoid using the cmd, netmask, pipeout, or nettask arguments in the affected getopt function until the issue is resolved.