What is CVE-2025-32409?

CVE-2025-32409 is a high-severity vulnerability in Ratta Supernote A6 X2 Nomad, classified under Relative Path Traversal. CVSS score: 8.1/10. Published 2025-04-07.

How severe is CVE-2025-32409?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2025-32409 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Ratta Supernote A6 X2 Nomad

CVE-2025-32409

Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signed with debug keys) can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of…

EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ratta Supernote A6 X2 Nomad — versions 0

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

Public proof-of-concept exploits

dwongdev/sugoi-supernote

References

cve@mitre.org

Frequently asked questions

What is CVE-2025-32409?: CVE-2025-32409 is a high-severity vulnerability in Ratta Supernote A6 X2 Nomad, classified under Relative Path Traversal. CVSS score: 8.1/10. Published 2025-04-07.
How severe is CVE-2025-32409?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2025-32409 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.