Description
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range)
Default version status: unaffected
0 to < 01.48.001affected