[Vulnerability Alert] New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection

• Subject: [Vulnerability Alert] New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection

• Content:
  • Forwarded from Taiwan Computer Network Emergency Response Team/Coordination Center TWCERTCC-200-202509-00000012
  • [New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection] (CVE-2025-10589, CVSS: 8.8) The N-Reporter, N-Cloud, and N-Probe products developed by New Partner Technology have an OS Command Injection vulnerability. An authenticated remote attacker can inject arbitrary operating system commands and execute them on the server.
• Affected Platforms:
  • Affected Products: N-Reporter, N-Cloud, N-Probe
  • Affected Firmware Versions: 6.x series versions prior to 6.1.187(20250730-1734) (exclusive), 7.x series versions prior to 7.0.009(20250805-1505) (exclusive)
  • Affected Kernel Versions: Versions prior to 20250811094737 (exclusive)
• Recommended Action:
  • Firmware Update:
  • 6.x versions should be updated to 6.1.187(20250730-1734) (inclusive) and later versions
  • 7.x versions should be updated to 7.0.009(20250805-1505) (inclusive) and later versions
  • Kernel Update:
  • Please update to version 20250811094737 (inclusive) and later versions
  • Firmware and Kernel must be updated simultaneously to ensure the patch is effective.
• References:
  1. New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection https://www.twcert.org.tw/tw/cp-132-10386-231ae-1.html

Computer and Communications Center
Network Systems Group