Security advisories
MiWire publishes an advisory for every confirmed vulnerability that affected shipped RouDem firmware or the MiWire services the unit relies on, once a fix is available to all units. Advisories are listed here, newest first, and the fix is noted in the changelog of the release that carries it on Firmware releases.
Published advisories
Section titled “Published advisories”No advisories have been published yet.
Advisory format
Section titled “Advisory format”Each advisory follows this structure:
| Field | Content |
|---|---|
| Identifier | MIWIRE-SA-<year>-<number>, and the CVE identifier if one was assigned |
| Published | date of publication; updated dates are listed below it |
| Severity | CVSS v3.1 base score and vector |
| Affected | product, hardware generation and firmware versions affected |
| Fixed in | the first firmware version that contains the fix |
| Description | what the vulnerability is and what an attacker could do |
| Mitigation | what a customer can do before the update reaches the unit, if anything |
| Credit | the reporter, if they wish to be named |
Units receive fixes automatically; see Firmware updates. To report a vulnerability, see Reporting vulnerabilities.