CVE-2025-63220

The CVE-2025-63220 entry concerns Sound4 FIRST's web-based management interface. The vulnerability is Remote Code Execution (RCE) via a malicious firmware update package, caused by the update mechanism failing to validate the integrity of the manual.sh script. An attacker could modify this script...

CVE-2025-52550 Firmware upgrade packages are unsigned

E3 Site Supervisor Control firmware version 2.31F01 firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade...

CVE-2025-52550

CVE-2025-52550 concerns the E3 Site Supervisor Control firmware. Affected versions are those with firmware upgrades that are unsigned (prior to 2.31F01). This permits forging malicious firmware upgrade packages. An attacker with admin access to application services could install such a package, l...