Date Posted: 2025/09/22

[Vulnerability Alert] New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection

  • Subject: [Vulnerability Alert] New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection
  • Content:
    • Forwarded from Taiwan Computer Network Emergency Response Team/Coordination Center TWCERTCC-200-202509-00000012
    • [New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection] (CVE-2025-10589, CVSS: 8.8) The N-Reporter, N-Cloud, and N-Probe products developed by New Partner Technology have an OS Command Injection vulnerability. An authenticated remote attacker can inject arbitrary operating system commands and execute them on the server.
  • Affected Platforms:
    • Affected Products: N-Reporter, N-Cloud, N-Probe
    • Affected Firmware Versions: 6.x series versions prior to 6.1.187(20250730-1734) (exclusive), 7.x series versions prior to 7.0.009(20250805-1505) (exclusive)
    • Affected Kernel Versions: Versions prior to 20250811094737 (exclusive)
  • Recommended Action:
    • Firmware Update:
    • 6.x versions should be updated to 6.1.187(20250730-1734) (inclusive) and later versions
    • 7.x versions should be updated to 7.0.009(20250805-1505) (inclusive) and later versions
    • Kernel Update:
    • Please update to version 20250811094737 (inclusive) and later versions
    • Firmware and Kernel must be updated simultaneously to ensure the patch is effective.
  • References:
    1. New Partner Technology｜N-Reporter, N-Cloud, N-Probe - OS Command Injection https://www.twcert.org.tw/tw/cp-132-10386-231ae-1.html

Computer and Communications Center
Network Systems Group