CVE-2025-59402

The CVE-2025-59402 entry concerns Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017. The vulnerability arises from accepting the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode, which under physical access enables flashing arbitrary firmware, dumping partitions,...

PT-2025-39453

Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The Flock Safety Bravo Edge AI Compute Device allows attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader an...

CVE-2025-54520

Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality...

CVE-2025-54520

Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality...

CVE-2025-54520

Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality...

CVE-2025-54520

CVE-2025-54520 describes an improper protection against voltage and clock glitches in FPGA devices, enabling a physically proximate attacker to undervolt the platform and cause a confidentiality loss. The vulnerability is associated with FPGA families such as Kintex 7-Series and Artix 7-Series in...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

CVE-2025-20313

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

CVE-2025-20314

CVE-2025-20314 describes a vulnerability in Cisco IOS XE Software where an authenticated local user with level-15 privileges or a physically proximate unauthenticated attacker can cause the device to execute persistent code at boot, effectively breaking the chain of trust. The root cause is impro...

CVE-2025-20313

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...

Cisco IOS XE Software Secure Boot Bypass Vulnerabilities

Multiple vulnerabilities in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due...

AMD Kintex 7-Series FPGA和AMD Artix 7-Series FPGA 安全漏洞

The AMD Kintex 7-Series FPGA and AMD Artix 7-Series FPGA are both FPGA chips from UltraMicroelectronics AMD. A security vulnerability exists in AMD Kintex 7-Series FPGAs and AMD Artix 7-Series FPGAs that stems from insufficient voltage and clock burr protection, which could lead to an attacker...

PT-2025-39355

Name of the Vulnerable Software and Affected Versions FPGA devices affected versions not specified Description The issue involves improper protection against voltage and clock glitches in FPGA devices. An attacker with physical access could undervolt the platform, potentially leading to a loss of...

PT-2025-39301

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The software contains flaws that could allow an authenticated local attacker with level-15 privileges, or an unauthenticated attacker with physical access to the device, to...

CVE-2025-9964

No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9964 Weak Authentication for Root User

No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9964

No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

PT-2025-39165

Name of the Vulnerable Software and Affected Versions Novakon P series version P – V2001.A.C518o2 Description A default or missing password for the root user allows physical attackers to easily access the console. This impacts the Novakon P series devices. Recommendations Set a strong password fo...

CVE-2025-43203

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...