New Rock Technologies Mx8G Voip Gateway vulnerabilities

CVE-2025-0680 [CRITICAL] CWE-78 CVE-2025-0680: Affected products contain a vulnerability in the device cloud rpc command handling process that coul Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.

CVE-2025-0681 [MEDIUM] CWE-155 CVE-2025-0681: The Cloud MQTT service of the affected products supports wildcard topic subscription which could al The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications.