← Back to CVE List
CVE-2026-121606NVD
Vulnerability Summary
A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification of cryptographic signature. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS v4.0 Base Metrics — Score 10.0 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)High
Availability (Vulnerable System)High
Confidentiality (Subsequent System)High
Integrity (Subsequent System)High
Availability (Subsequent System)High
CVSS v3.1 Base Metrics — Score 10.0 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Qihoo 360 D621-2 >= 6.4.0
- Qihoo 360 D621-2 >= 6.4.1
- Qihoo 360 D621-2 >= 6.4.2
- Qihoo 360 D621-2 >= 6.4.3
- Qihoo 360 D621-2 >= 6.4.4
- Qihoo 360 D621-2 >= 6.4.5
- Qihoo 360 D621-2 >= 6.4.6
- Qihoo 360 D621-2 >= 6.4.7
- Qihoo 360 D621-2 >= 6.4.8
- Qihoo 360 D621-2 >= 6.4.9
- Qihoo 360 D603-2 >= 6.4.0
- Qihoo 360 D603-2 >= 6.4.1
- Qihoo 360 D603-2 >= 6.4.2
- Qihoo 360 D603-2 >= 6.4.3
- Qihoo 360 D603-2 >= 6.4.4
- Qihoo 360 D603-2 >= 6.4.5
- Qihoo 360 D603-2 >= 6.4.6
- Qihoo 360 D603-2 >= 6.4.7
- Qihoo 360 D603-2 >= 6.4.8
- Qihoo 360 D603-2 >= 6.4.9
- Qihoo 360 D600-2 >= 6.4.0
- Qihoo 360 D600-2 >= 6.4.1
- Qihoo 360 D600-2 >= 6.4.2
- Qihoo 360 D600-2 >= 6.4.3
- Qihoo 360 D600-2 >= 6.4.4
- Qihoo 360 D600-2 >= 6.4.5
- Qihoo 360 D600-2 >= 6.4.6
- Qihoo 360 D600-2 >= 6.4.7
- Qihoo 360 D600-2 >= 6.4.8
- Qihoo 360 D600-2 >= 6.4.9
- Qihoo 360 D619 >= 6.4.0
- Qihoo 360 D619 >= 6.4.1
- Qihoo 360 D619 >= 6.4.2
- Qihoo 360 D619 >= 6.4.3
- Qihoo 360 D619 >= 6.4.4
- Qihoo 360 D619 >= 6.4.5
- Qihoo 360 D619 >= 6.4.6
- Qihoo 360 D619 >= 6.4.7
- Qihoo 360 D619 >= 6.4.8
- Qihoo 360 D619 >= 6.4.9
- Qihoo 360 D606-6 >= 6.4.0
- Qihoo 360 D606-6 >= 6.4.1
- Qihoo 360 D606-6 >= 6.4.2
- Qihoo 360 D606-6 >= 6.4.3
- Qihoo 360 D606-6 >= 6.4.4
- Qihoo 360 D606-6 >= 6.4.5
- Qihoo 360 D606-6 >= 6.4.6
- Qihoo 360 D606-6 >= 6.4.7
- Qihoo 360 D606-6 >= 6.4.8
- Qihoo 360 D606-6 >= 6.4.9
- Qihoo 360 D706 >= 6.4.0
- Qihoo 360 D706 >= 6.4.1
- Qihoo 360 D706 >= 6.4.2
- Qihoo 360 D706 >= 6.4.3
- Qihoo 360 D706 >= 6.4.4
- Qihoo 360 D706 >= 6.4.5
- Qihoo 360 D706 >= 6.4.6
- Qihoo 360 D706 >= 6.4.7
- Qihoo 360 D706 >= 6.4.8
- Qihoo 360 D706 >= 6.4.9
Not provided by cveorg for this CVE.