CVE-2025-32409: Relative Path Traversal

Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image signed with debug keys can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of...

Ratta SuperNote A6 X2 Nomad 安全漏洞

Ratta SuperNote A6 X2 Nomad is an electronic notebook from Ratta SuperNote. A security vulnerability exists in the Ratta SuperNote A6 X2 Nomad that stems from improper directory traversal and concurrency handling, which could lead to remote code execution...

PT-2025-15302 · Ratta · Ratta Supernote A6 X2 Nomad

Name of the Vulnerable Software and Affected Versions: Ratta SuperNote A6 X2 Nomad versions prior to December 2024 Description: The issue allows remote code execution because an arbitrary firmware image signed with debug keys can be sent to TCP port 60002, and placed into the correct image-update...