Read the docs
TI-2020-15849 Aliases CVE-2020-25860

Time-of-check time-of-use race condition in Pengutronix RAUC

Priority LOW 32CWE-367Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.

Why it matters now

EPSS 0.01446 73rd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed Pengutronix RAUC: 1.5

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Pengutronix RAUCbefore 1.51.5Patch availableCNA
  • Pengutronix RAUC Vendor— Affected before 1.5 Fixed in 1.5 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pengutronix:rauc:*:*:*:*:*:*:*:*before 1.5Vulnerablebarebox
  • cpe:2.3:a:pengutronix:rauc:*:*:*:*:*:*:*:* Versions before 1.5 Vulnerable ·barebox

Remediation

  • Fix · CNA Pengutronix RAUC Fixed in 1.5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-25860

References

Exploit 2

  • TI-2026-26456 RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB CVSS 4.0HIGH 7.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences