Shizenbox2 Dev Conf
Monthly
Unauthenticated bootloader command execution in ShizenBox2 (dev-conf) firmware ≤v1.0.10 is achievable by any attacker with physical access to the device. The 'dev-conf' firmware variant from Shizen Connect Inc. fails to enforce authentication on bootloader interfaces (CWE-1263), exposing full device control - including firmware manipulation - without credential verification. Reported through JPCERT/JVN responsible disclosure; no public exploit code identified and no CISA KEV listing at time of analysis.
Unauthenticated bootloader command execution in ShizenBox2 (dev-conf) firmware ≤v1.0.10 is achievable by any attacker with physical access to the device. The 'dev-conf' firmware variant from Shizen Connect Inc. fails to enforce authentication on bootloader interfaces (CWE-1263), exposing full device control - including firmware manipulation - without credential verification. Reported through JPCERT/JVN responsible disclosure; no public exploit code identified and no CISA KEV listing at time of analysis.