CVE-2025-5834: medium-severity vulnerability in Pioneer DMH-WT7600NEX
Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.4epss 0.3%
Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the configuration of the application system-on-chip (SoC). The issue results from the lack of a properly configured hardware root of trust. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the boot process. Was ZDI-CAN-26078.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected products
Pioneer · DMH-WT7600NEXRelated CVEs — Pioneer DMH-WT7600NEX
In the same product, most dangerous first.
CVE-2024-23930MEDIUMPioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional ConditionsEPSS 0.5%CVE-2024-23929HIGHPioneer DMH-WT7600NEX Telematics Directory TraversalEPSS 0.5%CVE-2025-5833MEDIUMPioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity VulnerabilityEPSS 0.3%CVE-2025-5832MEDIUMPioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity VulnerabilityEPSS 0.2%CVE-2024-23928MEDIUMPioneer DMH-WT7600NEX Telematics Improper Certificate ValidationEPSS 0.2%