CVE-2026-22097:详情

CVE-2026-22097

2026-07-13
10h16 +00:00
A02-Cryptographic Failures
2026-10-24
22h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.

参考资料