OpenWrt Sysupgrade flaw let hackers push malicious firmware images

Published on December 9, 2024

A flaw in OpenWrt's Attended Sysupgrade feature used to build custom, on-demand firmware images could have allowed for the distribution of malicious firmware packages. [...]