CVE-2025-8656 Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability

Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows physically present attackers to downgrade software on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2025-8653

CVE-2025-8653 affects Kenwood DMX958XR via the JKRadioService. The issue is a stack-based buffer overflow caused by insufficient validation of user-supplied data length, allowing an attacker to execute code with root privileges from a network-adjacent position (no authentication required). The vu...

CVE-2025-8652

Summary (CVE-2025-8652) : Kenwood DMX958XR JKWifiService has a command injection flaw that allows an attacker with physical access to execute arbitrary code as root by sending an unsanitized user string to a system call. The issue resides in JKWifiService and enables remote code execution in the ...

CVE-2025-8651 Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability

Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

CVE-2025-8650 Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability

Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

CVE-2025-8649 Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability

Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

CVE-2025-8647

The CVE-2025-8647 entry concerns the Kenwood DMX958XR firmware update process. A root-principal command injection flaw arises from insufficient validation of a user-supplied string prior to using it in a system call, enabling arbitrary code execution with root privileges. Exploitation requires ph...

CVE-2025-8647 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8646 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8645

The CVE-2025-8645 issue affects Kenwood DMX958XR firmware update handling. The root cause is insufficient validation of a user-supplied string before invoking a system call during the firmware update process, enabling a physically present attacker to execute arbitrary code with root privileges. P...

CVE-2025-8643 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8642

CVE-2025-8642 concerns the Kenwood DMX958XR firmware update command injection vulnerability. The flaw is in the firmware update process, caused by insufficient validation of a user-supplied string before using it to execute a system call, allowing an attacker with physical access and no authentic...

CVE-2025-8640 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8638 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8637

CVE-2025-8637 concerns the Kenwood DMX958XR firmware update flow. The flaw is a lack of validation of a user-supplied string used in a system call, enabling command execution in root when an attacker can physically access the device. Public disclosures (ZDI-25-785 and related feeds) confirm the i...

CVE-2025-8636 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8635

Kenwood DMX958XR firmware update command-injection vulnerability allows physically present attackers to execute code as root due to insufficient validation of a user-supplied string in the firmware update process. Several sources (ZDI advisory ZDI-25-783 and related CVE feeds) confirm the issue a...

CVE-2025-8634

CVE-2025-8634 concerns the Kenwood DMX958XR firmware update process. The root cause is the lack of proper validation of a user-supplied string before it is used to execute a system call, which can allow a physically present attacker to run arbitrary code with root privileges on affected devices. ...

CVE-2025-8633 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2025-8633

CVE-2025-8633 concerns the Kenwood DMX958XR firmware update path. The root cause is insufficient validation of a user-supplied string before it is used in a system call during the firmware update process, allowing code execution with root privileges. The attack requires physical access and no aut...