VULNERABILITY INTELLIGENCE
CVE-2025-59104
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-01-26
Last modified2026-06-17
Description
With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attacker is able to gain a root shell through this vulnerability.
Weakness classification
- 551230f0-3615-47bd-b7cc-93e92e730bbf: CWE-1234