CVE-2025-41696 Hardcoded User Password

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device...

CVE-2025-41697 Shell access to UART Console

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692...

CVE-2025-41692

creationtimestamp| type| source ---|---|--- 2025-12-09 07:58:10+00:00| seen| https://infosec.exchange/users/certvde/statuses/115688544042508118 2025-12-09 07:58:54+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3m7k35bxdqsp2 2025-12-09 11:19:15+00:00| seen|...

PT-2025-49815

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device...