Firmware Signature Verification Bypass in Phison PS3111-S11 Controller

⚠️ CVE-Referenzen: CVE-2026-82876
Phison Electronics Corporation - Ps3111-s11 Controller Firmware - CRITICAL - CVE-2026-82876. The Phison PS3111-S11 controller firmware exhibits a critical flaw in its RSA signature verification process. The firmware improperly validates RSA signatures using a public modulus that is hardcoded within the firmware image, instead of employing securely stored immutable references. This design flaw allows attackers to generate arbitrary RSA key pairs, create maliciously modified firmware signed with the corresponding private key, and embed the embedded public modulus into the signature segment. Consequently, the firmware will accept this altered version as authentic, granting unauthorized control over the firmware execution and possibly leading to further exploits. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io