CVE-2025-0680 New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

[
  {
    "defaultStatus": "unaffected",
    "product": "OM500 IP-PBX",
    "vendor": "New Rock Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MX8G VoIP Gateway",
    "vendor": "New Rock Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NRP1302/P Desktop IP Phone",
    "vendor": "New Rock Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  }
]