CVE-2026-22097:詳細資料

CVE-2026-22097

2026-07-13
10h16 +00:00
A02-Cryptographic Failures
2026-10-24
22h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.

參考資料