https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:17:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-17494 cnvd-2020-17494 https://cve.radiocsirt.org/vuln/cnvd-2020-17494 https://cve.radiocsirt.org/vuln/euvd-2026-49980 EUVD-2026-49980 https://cve.radiocsirt.org/vuln/euvd-2026-49980 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5158 <p>An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability.</p> <p>An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5158 https://cve.radiocsirt.org/vuln/ghsa-9jpm-926g-xmv9 <p>An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability.</p> <p>An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-9jpm-926g-xmv9 https://cve.radiocsirt.org/vuln/gsd-2019-5158 gsd-2019-5158 https://cve.radiocsirt.org/vuln/gsd-2019-5158 https://cve.radiocsirt.org/vuln/vde-2020-009 <p>The firmware update package (WUP) is not signed entirely. The used password offers no additional security, it is just meant to protect from unintentional modifications of the WUP file. Thus only the integrity of the signed firmware part (rauc file) is protected against intended manipulation. An attacker could manipulate the WUP file in a way that additional files with potentially malicious content are added to the WUP file. In case an authorized user that issues a firmware update could be tricked into installing this manipulated WUP file onto the device, the potentially malicious files would also be copied and installed on to the device and executed with elevated privileges.</p> <p>The firmware update package (WUP) is not signed entirely. The used password offers no additional security, it is just meant to protect from unintentional modifications of the WUP file. Thus only the integrity of the signed firmware part (rauc file) is protected against intended manipulation. An attacker could manipulate the WUP file in a way that additional files with potentially malicious content are added to the WUP file. In case an authorized user that issues a firmware update could be tricked into installing this manipulated WUP file onto the device, the potentially malicious files would also be copied and installed on to the device and executed with elevated privileges.</p> https://cve.radiocsirt.org/vuln/vde-2020-009