Significant OpenWrt Vulnerability Leaves Devices Vulnerable to Malicious Firmware Injection
An uncovered security weakness in the Attended Sysupgrade (ASU) function of OpenWrt has the potential to be utilized for spreading harmful firmware packages.
The security flaw, known as CVE-2024-54143, has been assigned a CVSS score of 9.3 out of 10, signifying its critical nature. The detection and disclosure of this vulnerability are attributed to RyotaK, a security expert from Flatt Security.
The security flaw, known as CVE-2024-54143, has been assigned a CVSS score of 9.3 out of 10, signifying its critical nature. The detection and disclosure of this vulnerability are attributed to RyotaK, a security expert from Flatt Security.
