Firmware Verification Vulnerability in H3C HDM Family-A

CVE-2026-65197

What is CVE-2026-65197?

The H3C HDM Family-A firmware contains a vulnerability that allows an authenticated Redfish client to overwrite the RSA public key used for verifying firmware images. By exploiting the UpdateService.UploadSignKey action, an attacker can replace the public key stored in the writable /conf/public.pem file. This enables the attacker to sign a malicious firmware image with a corresponding private key, evading security measures due to the lack of a hardware root-of-trust mechanism. Consequently, this flaw poses a significant risk, particularly for administrators or users with firmware update privileges.

References