CVE-2024-25077

The Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices are vulnerable to an issue where the Nonce used for on-the-fly decryption of flash images is stored in an unsigned header . This allows an attacker to modify the Nonce without invalidating the signature used for secureboot image...

CVE-2018-3833

An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the firmware version that is going to be installed...