CVE-2018-17923

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it...

CVE-2018-17923

The connected reports confirm a concrete vulnerability in GAIN Electronic’s SAGA1-L8B firmware prior to A0.10. The root cause is in the device programming mechanism, allowing an attacker with physical access to bypass authentication and reprogram the firmware. ZDI-18-1318 notes this can enable fi...