CVE-2025-8647

The CVE-2025-8647 entry concerns the Kenwood DMX958XR firmware update process. A root-principal command injection flaw arises from insufficient validation of a user-supplied string prior to using it in a system call, enabling arbitrary code execution with root privileges. Exploitation requires ph...

CVE-2025-8647

creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-795/...