CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – 通过低阶点注入绕过 IoT 固件更新签名 概述 IoT 设备的 OTA 固件验证使用了存在缺陷的 Ed25519 实现，该实现不会拒绝包含小阶分量的公钥，从而允许攻击者为恶意固件伪造有效签名。 严重性： 严重（设备持久性失陷） 模拟（Python 与 C 验证器） root@kitploit: !/usr/bin/env python3 """ forgefirmware.py - Creates a malicious firmware image with forged Ed25519 signature. We exploit that the...

CVE-2025-65855

CVE-2025-65855 HelpFlash IoT OTA更新多种漏洞 摘要 Netun Solutions HelpFlash IoT的OTA固件更新机制中存在多个漏洞，攻击者只需短暂的物理接触即可执行任意代码。 CVE ID: CVE-2025-65855 严重性: 高 CVSS v3.1 评分: 7.6 研究人员评估 - 待NVD分析 CVSS 向量: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS 分解 攻击向量 AV: 物理 - 短暂物理接触（约10秒） 攻击复杂度 AC: 低 - 硬编码凭证使攻击简单直接 所需权限 P...

CVE-2026-9397

A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handler. This manipulation causes improper authorization. The attack is possible to be carried out remotely. A high degree...

CVE-2025-44018

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2025-44018

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2025-44018

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

GL-Inet GL-AXT1800 OTA Update firmware downgrade vulnerability

Talos Vulnerability Report TALOS-2025-2230 GL-Inet GL-AXT1800 OTA Update firmware downgrade vulnerability November 24, 2025 CVE Number CVE-2025-44018 SUMMARY A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can le...

EUVD-2023-46319

Malicious code in bioql PyPI...

EUVD-2021-9133

Malicious code in bioql PyPI...

EUVD-2021-9138

Malicious code in bioql PyPI...

CVE-2023-41827

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

CVE-2021-21962

A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A series of specially-crafted MQTT payloads can lead to remote code execution. An attacker must perform a man-in-the-middle attack in order to trigger th...

CVE-2023-41827

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

Input validation

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

CVE-2023-41827

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

PT-2023-9141 · Owlet · Owlet Cam

Name of the Vulnerable Software and Affected Versions: Owlet Cam versions v1 and v2 Description: A command injection vulnerability exists in the IOCTL that manages OTA updates, allowing a specially crafted command to lead to command execution as the root user. An attacker can make authenticated...

CVE-2021-21967

An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2021-21967

An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

Cross site scripting

An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2021-21967

CVE-2021-21967 affects Sealevel Systems SeaConnect 370W v1.3.34. The OTA update task parses a JSON payload over MQTT and copies the dest field from OTAUpdateStruct into a 0x40-byte buffer using strcpy, leading to a stack-based buffer overflow when dest exceeds the buffer and removing the null ter...