Embedded Device Operating Sytem Had Flaw Allowing Hacers to Bypass Integrity Check. A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, with a CVSS core of 9.3 and tracked as CVE-2024-54143.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/openwrt-update-flaw-exposed-devices-to-malicious-firmware-a-27017