CVE-2025-32409
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Apr 7, 2025
Updated: Apr 8, 2025
CWE ID 23
Summary
CVE-2025-32409 is a remote code execution vulnerability affecting Ratta SuperNote A6 X2 Nomad devices before December 2024. An attacker can exploit this issue by sending a malicious firmware image to TCP port 60002. The device, due to a combination of directory traversal and inadequate handling of concurrency, will place the harmful image into the correct update location, allowing the attacker to execute arbitrary code on the device.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.