Skip to content
Threat Feed
Subscribe

Tag

Firmware-Security

2 briefs RSS
high threat

Improper Certificate Validation in SWUpdate

SWUpdate through 2026.05.1 is vulnerable to certificate validation bypass in crypto/swupdate_cms_verify_openssl.c, allowing attackers to sign and install malicious update packages.

exploited SWUpdate vulnerability firmware-security supply-chain
2t 1c
high advisory

Improper RSA Signature Validation in Phison PS3111-S11 Controller Firmware

The Phison PS3111-S11 controller firmware is vulnerable to arbitrary firmware modification due to RSA signature validation against an embedded public modulus rather than immutable hardware-backed storage.

PS3111-S11 +1 hardware-security firmware-vulnerability persistence firmware-security privilege-escalation
2t 1c updated