7.2
High
CVE-2025-1058 CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when…
Description
CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASCO 5310 Single-Channel Remote Annunciator | Versions not published | |
| ASCO 5350 Eight Channel Remote Annunciator | Versions not published |
Other CVEs of ASCO 5310 Single-Channel Remote Annunciator
The 4 CVEs of ASCO 5310 Single-Channel Remote Annunciator →
CVE-2025-1070
CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable…
7.2
High
CVE-2025-1060
CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of…
8.7
High
CVE-2025-1059
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to…
8.7
High