Approved changes feed: RSS · Atom

cpe:2.3:o:blurams:dome_flare_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorBlurams (156c3e41-dfe7-55b8-a579-47af14795d2d)
ProductDome Flare Firmware (917f093e-40bc-5797-9613-15edd9595d46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-65397 vulnerable 2026-06-08 07:39:20.858889 Details available
An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/public_key.der is not present in the file system. The vulnerability can be triggered by providing a maliciously crafted auth.ini file on the device's SD card.
Published: 2026-01-14T00:00:00.000Z
Updated: 2026-07-05T16:13:33.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65396 vulnerable 2026-06-08 07:39:20.857744 Details available
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the boot, by shorting a data pin of the IC to ground. An attacker can then dump the entire firmware, leading to the disclosure of sensitive information including cryptographic keys and user configurations.
Published: 2026-01-14T00:00:00.000Z
Updated: 2026-07-05T16:13:28.969Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.