What is the CVSS score of EUVD-2025-19126?

EUVD-2025-19126 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dmh Wt7600nex Firmware are affected by EUVD-2025-19126?

Pioneer DMH-WT7600NEX devices contain a hardware-level privilege escalation vulnerability that allows attackers with local access to bypass authentication and execute arbitrary code during boot.

How to fix or mitigate EUVD-2025-19126?

Within 24 hours: Identify and inventory all Pioneer DMH-WT7600NEX devices in your environment and assess their network connectivity and physical access controls. Within 7 days: Implement physical security measures restricting unauthorized device access and disable remote administration features if enabled. Within 30 days: Evaluate replacement options and establish a procurement timeline for alternative head units with verified security architectures; contact Pioneer for vendor guidance on remediation timelines.

Dmh Wt7600nex Firmware EUVD-2025-19126

| CVE-2025-5834 HIGH

Missing Immutable Root of Trust in Hardware (CWE-1326)

2025-06-25 zdi-disclosures@trendmicro.com

RCE Privilege Escalation Dmh Wt7600nex Firmware

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 23:19 euvd

EUVD-2025-19126

Analysis Generated

Mar 15, 2026 - 23:19 vuln.today

CVE Published

Jun 25, 2025 - 18:15 nvd

HIGH 7.8

DescriptionCVE.org

Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the configuration of the application system-on-chip (SoC). The issue results from the lack of a properly configured hardware root of trust. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the boot process. Was ZDI-CAN-26078.

AnalysisAI

CVE-2025-5834 is a local privilege escalation vulnerability in Pioneer DMH-WT7600NEX infotainment systems caused by a missing hardware root of trust in the SoC configuration. An attacker with local access and valid authentication credentials can bypass the existing authentication mechanism and execute arbitrary code during boot with elevated privileges. The vulnerability has a CVSS score of 7.8 (High) and was previously tracked as ZDI-CAN-26078; exploitation likelihood and active exploitation status depend on public POC availability and EPSS scoring.

Technical ContextAI

This vulnerability resides in the hardware-level configuration of the Pioneer DMH-WT7600NEX's system-on-chip (SoC), specifically the absence of an immutable root of trust mechanism. CWE-1326 (Hardware Root of Trust Issues) indicates that the device lacks cryptographic verification of boot firmware and system integrity at the hardware level. Without a properly configured secure boot chain anchored in hardware, an attacker can tamper with bootloader, kernel, or system software without detection. The DMH-WT7600NEX is an automotive infotainment receiver that integrates multimedia playback, navigation, and vehicle integration functions—all of which execute with privileges derived from an unverified boot process. The missing immutable root of trust means no hardware-enforced cryptographic validation occurs before code execution, allowing privilege escalation from a low-privilege authenticated user context to arbitrary code execution in the secure boot environment.

RemediationAI

Remediation options are limited by the nature of the vulnerability: (1) Firmware Update: Pioneer should release a signed firmware update that implements cryptographic verification and secure boot enforcement, though this may not fully address missing hardware-level immutable trust anchors. (2) Hardware Mitigation: For new devices, Pioneer must implement hardware-enforced secure boot with an immutable root of trust in the SoC—potentially requiring hardware revision. (3) Access Controls: Interim mitigation includes restricting local access to the device, disabling physical debug ports, and enforcing strong authentication mechanisms for any local interfaces. (4) Vendor Advisory: Check Pioneer's official security advisory for patched firmware versions and deployment guidance. Users should contact Pioneer support at their official channels to obtain and deploy available patches. (5) Detection: Implement device integrity monitoring and anomaly detection on boot processes to identify tampering attempts.