Firmware is low-level software stored in nonvolatile memory on hardware devices that initializes, configures, and controls components before and alongside the operating system. It matters in enterprise environments because it underpins reliability, security controls, and lifecycle management for infrastructure and devices.
52 articles about Firmware
Decision Insights Threat Desk • November 27, 2025
Tenda N300 and 4G03 Pro routers have command injection flaws enabling root access; no patches currently exist.
Decision Insights Threat Desk • November 27, 2025
A vulnerability in Opto 22's GRV-EPIC and groov RIO devices allows remote command execution with root privileges. Affected firmware versions are prior to 4.0.3. A patch is available, and CISA recommends network security measures.
Decision Insights Threat Desk • November 26, 2025
Draytek Vigor routers with DrayOS firmware have a remote code execution flaw in EasyVPN and LAN interfaces enabling attacker control.
Decision Insights Threat Desk • November 26, 2025
Clevo's UEFI firmware leaked private Boot Guard keys, risking pre-boot firmware integrity on affected systems.
Decision Insights Threat Desk • November 25, 2025
A vulnerability in Shelly Pro 4PM smart DIN rail switches prior to version 1.6 allows attackers to cause denial of service by exploiting a resource allocation flaw in the JSON parser. The issue has a CVSS v4 score of 8.3. Mitigations include software updates and network security measures.
Decision Insights Threat Desk • November 25, 2025
Opto 22's groov View software and firmware versions prior to R4.5e and 4.0.3 respectively have a vulnerability exposing sensitive metadata such as API keys. The company has released patches and CISA advises network isolation and VPN use to mitigate potential exploitation risks.
Decision Insights Threat Desk • November 25, 2025
CISA issued six advisories for Industrial Control Systems covering vulnerabilities in products from Schneider Electric, Shelly, and METZ CONNECT.
Decision Insights Signals • November 25, 2025
CyberRatings.org updated firewall test results show Fortinet and Palo Alto Networks improved evasion resistance and security effectiveness.
Decision Insights Coverage • November 22, 2025
Aviz Networks released ONES 2.0, enhancing SONiC network visibility, orchestration, and support capabilities for enterprise deployments.
Decision Insights Threat Desk • November 20, 2025
Opto 22 has addressed a critical vulnerability in its GRV-EPIC and groov RIO products that could allow remote code execution with root privileges. Users are advised to update to firmware version 4.0.3. Recommended cybersecurity measures for organizations have been outlined by CISA.
Decision Insights Threat Desk • November 18, 2025
Clevo's firmware updates revealed private keys for Intel Boot Guard, risking UEFI security on affected systems due to potential exploitation.
Decision Insights Coverage • November 15, 2025
ONES 2.0 enhances SONiC network operations through improved visibility, orchestration, and support features for efficient management.