JetKVM Insufficient Firmware Verification Vulnerability

A vulnerability exists in JetKVM versions prior to 0.5.4, where the authenticity of downloaded firmware files is not properly verified. This lack of verification allows an attacker-in-the-middle or a compromised update server to alter the firmware and its corresponding SHA256 hash, potentially bypassing verification checks.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of firmware, allowing for the installation of malicious firmware that could be used to compromise the system or its security.