Critical OpenWrt Vulnerability Exposed: Hackers Could Inject Malicious Code Into Router Firmware

A critical security vulnerability (CVE-2024-54143, CVSS v4: 9.3) was discovered in OpenWrt's Attended Sysupgrade feature, potentially enabling attackers to distribute malicious firmware. The flaw involves command injection vulnerability and insecure hash implementation in the sysupgrade se...