Description
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fermax Electronica S.A.U. | DUOX PLUS monitor firmware (VEO Wi-Fi range) | < 01.48.001 | 01.48.001 |
References
- Fermax security advisories vendor-advisory