FlagThis

Abstract

Westermo products running WeOS utilize third-party bootloader components in the Viper 3000-series that contain a vulnerability when Secure Boot is enabled. This improper verification of cryptographic signatures allows the bypass of Westermo signed image verification, provided the adversary has physical access or authenticated permissions to perform upgrades.