CVE-2023-33768

CVE-2023-33768 설명 Belkin Wemo Smart Plug WSP080 v1.2의 장치 펌웨어 업데이트 과정에서 펌웨어 서명 검증이 올바르게 이루어지지 않아, 공격자가 조작된 펌웨어 파일을 통해 서비스 거부DoS를 유발할 수 있습니다. 추가 정보 모바일 애플리케이션을 통해 Wemo 스마트 플러그의 펌웨어를 업데이트할 때, 스마트 플러그 펌웨어 바이너리의 펌웨어 서명이 유효하지 않으면 Wemo 스마트 플러그가 응답을 멈추고벽돌 상태가 됨 동작하지 않게 되는 것을 발견했습니다. Wemo Android...

CVE-2023-33768

CVE-2023-33768 설명 Belkin Wemo Smart Plug WSP080 v1.2의 Device Firmware Update 프로세스 중 펌웨어 서명 검증이 올바르지 않아 공격자가 조작된 펌웨어 파일을 통해 서비스 거부DoS를 유발할 수 있습니다. 추가 정보 Wemo 스마트 플러그의 펌웨어를 모바일 애플리케이션을 통해 업데이트할 때, 스마트 플러그 펌웨어 바이너리의 펌웨어 서명이 유효하지 않으면 Wemo 스마트 플러그가 응답을 중지하게벽돌이 되어 만들 수 있음을 발견했습니다. 우리는 Wemo Android...

the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass

CVE-2026-82876 — Phison S11 SSD 펌웨어 서명 검증 우회 PoC CVE-2026-82876CVSS 3.1: 8.2 High / CVSS 4.0: 9.3 Critical, CWE-347에 대한 개념 증명PoC입니다: Phison PS3111-S11 SATA SSD 컨트롤러는 펌웨어 업데이트 RSA 서명을 불변 컨트롤러 저장소에 고정된 모듈러스 대신 펌웨어 이미지 자체에 내장된 공개 모듈러스 에 대해 검증합니다. 누구나 자신의 RSA 키 쌍을 생성하고, 수정된 펌웨어에 다시 서명하고, 일치하는 모듈러스를 내...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-76852

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtdwrite allowing forged firmware authenticity checks. Attackers can exploit putfile.cgi and checkimageuuid.c to bypass firmware signature validation and load unauthorized firmware images...

PT-2026-93186

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd write allowing forged firmware authenticity checks. Attackers can exploit put file.cgi and check image uuid.c to bypass firmware signature validation and load unauthorized firmware images...

CVE-2026-82876 Phison PS3111-S11 Controller Firmware Signature Verification Bypass

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...

Exploit for Inefficient Regular Expression Complexity in Securly

--- CVE-2026-8888 – Printer Firmware Unsigned Update via HTT...

CVE-2026-44104 ControllerAgent does not perform validation of firmware

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

DEBIAN-CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

EUVD-2026-48646

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

CVE-2026-64237 Input: elan_i2c - validate firmware size before use

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

Vulnerabilities in Siemens SICORE

Siemens has identified vulnerabilities in the SICORE Base system, particularly in versions under V26.20. These vulnerabilities are located in several components of the CPCI85 and SICORE Base systems. One of these vulnerabilities allows an authenticated attacker to crash the web service through an...

CVE-2026-54799

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install...

EUVD-2026-30673

Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...

PT-2025-51840

Name of the Vulnerable Software and Affected Versions Netun Solutions HelpFlash IoT version v18 178 221102 ASCII PRO 1R5 50 Description The over-the-air OTA firmware update process in the software does not properly authenticate update servers or validate firmware signatures, and relies on...

CVE-2025-65855

The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...

CVE-2025-36747

ShineLan-X contains a set of credentials for an FTP server was found within the firmware, allowing testers to establish an insecure FTP connection with the server. This may allow an attacker to replace legitimate files being deployed to devices with their own malicious versions, since the firmwar...

D-Link DAP-2695 数据伪造问题漏洞

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China AUO D-Link. A data forgery issue vulnerability exists in the D-Link DAP-2695 version 2.00RC13, which stems from the function sub40C6B8 in the Firmware Update Handler component not properly verifying the...