Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 32

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00206 Published 2025-10-24 Fixed in all known versions prior to 2025-10-23 CWE-1326
Priority LOW 30

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validat…

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.0015 Published 2025-10-24 Fixed in all known versions prior to 2025-10-23 CWE-321