75 matches found
the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass
CVE-2026-82876 — Phison S11 SSDファームウェア署名検証バイパス（PoC） CVE-2026-82876 （CVSS 3.1: 8.2 High / CVSS 4.0: 9.3 Critical、CWE-347）の概念実証です。Phison PS3111-S11 SATA SSDコントローラは、ファームウェア更新用RSA署名を、不変のコントローラストレージに固定されたモジュラスではなく、ファームウェアイメージ自体に埋め込まれた公開モジュラス...
CVE-2023-33768
CVE-2023-33768 説明 Belkin Wemo Smart Plug WSP080 v1.2 のデバイスファームウェア更新プロセス中におけるファームウェアの署名検証の不備により、攻撃者が細工されたファームウェアファイルを介してサービス拒否 DoS を引き起こす可能性があります。 追加情報 Wemo スマートプラグのファームウェアをモバイルアプリ経由で更新する際、スマートプラグのファームウェアバイナリの署名が無効な場合、Wemo スマートプラグが応答を停止する（文鎮化する）ことが判明しました。 Wemo Android アプリ com.belkin.wemoandroid...
CVE-2023-33768
CVE-2023-33768 説明 Belkin Wemo Smart Plug WSP080 v1.2 のデバイス ファームウェア更新プロセス中のファームウェアの署名検証の不備により、 攻撃者は細工されたファームウェアファイルを介して サービス拒否 DoS を引き起こすことができます。 追加情報 Wemo スマートプラグをモバイルアプリ経由でファームウェア更新する際、スマートプラグのファームウェアバイナリのファームウェア署名が無効な場合、Wemo スマートプラグが応答しなくなる（文鎮化する）可能性があることを発見しました。 Wemo Android アプリ...
CVE-2026-82876 Phison PS3111-S11 Controller Firmware Signature Verification Bypass
Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...
DEBIAN-CVE-2026-64237
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...
EUVD-2026-48646
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...
CVE-2026-64237 Input: elan_i2c - validate firmware size before use
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...
EUVD-2026-30673
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
CVE-2025-65855
The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...
PT-2025-51840
Name of the Vulnerable Software and Affected Versions Netun Solutions HelpFlash IoT version v18 178 221102 ASCII PRO 1R5 50 Description The over-the-air OTA firmware update process in the software does not properly authenticate update servers or validate firmware signatures, and relies on...
CVE-2025-36747
ShineLan-X contains a set of credentials for an FTP server was found within the firmware, allowing testers to establish an insecure FTP connection with the server. This may allow an attacker to replace legitimate files being deployed to devices with their own malicious versions, since the firmwar...
D-Link DAP-2695 数据伪造问题漏洞
The D-Link DAP-2695 is a high-performance dual-band wireless access point from China AUO D-Link. A data forgery issue vulnerability exists in the D-Link DAP-2695 version 2.00RC13, which stems from the function sub40C6B8 in the Firmware Update Handler component not properly verifying the...
CVE-2025-60855
Reolink Video Doorbell WiFi DB566128M5MPW performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges. NOTE: this is disputed by the Supplier because the integrity of updates is...
CVE-2025-60855
Reolink Video Doorbell WiFi DB566128M5MPW performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges. NOTE: this is disputed by the Supplier because the integrity of updates is...
CVE-2025-60855
CVE-2025-60855 affects Reolink Video Doorbell WiFi DB_566128M5MP_W. The vulnerability is due to insufficient validation of firmware update signatures, which could allow loading of malicious firmware and result in arbitrary code execution with root privileges. Some sources note the supplier disput...
EUVD-2014-9802
Malware in sbrugna...
EUVD-2019-7568
Malware in sbrugna...
EUVD-2021-22794
Malware in sbrugna...