CVE-2025-32409
High
Description
Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signed with debug keys) can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of concurrency.
SeverityHigh
CVSS8.1
Exploit probability—
ProductSuperNote A6 X2 Nomad
PublishedApr 7, 2025
First seenApr 7, 2025
Weakness typeCWE-23CWE-23
How to fix
Update
- Ratta SuperNote A6 X2 NomadDecember 2024 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Ratta SuperNote A6 X2 Nomad | v < December 2024 | December 2024 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.