CVE-2018-17923

The connected reports confirm a concrete vulnerability in GAIN Electronic’s SAGA1-L8B firmware prior to A0.10. The root cause is in the device programming mechanism, allowing an attacker with physical access to bypass authentication and reprogram the firmware. ZDI-18-1318 notes this can enable fi...