Kenwood · Kenwood Dmx958Xr · CVE-2025-8648
**Name of the Vulnerable Software and Affected Versions**
Kenwood DMX958XR (affected versions not specified)
**Description**
This issue allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices without authentication. The flaw resides in the firmware update process due to insufficient validation of user-supplied input before executing a system call, enabling an attacker to execute code with root privileges.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.