← Back to feed
advisories Zero Day Initiative

ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

Zero Day Initiative

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is no...

T1059 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Aug 24 advisories DOUBLECUP's PNG Payload, (Mon, Aug 24th) SANS ISC · Aug 24 advisories ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability Zero Day Initiative · Aug 24