SecAlerts
k

kenwood

Security Risk Profile

63
/100
high

Security Risk Score

Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from January 22, 2025 to present

26
Total CVEs
6
Critical+High
5
Exploited
6
Unpatched

Threat Assessment

Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
63/100
high
⚠️ 5 Active Exploits 5 Zero-Days

Severity Distribution

Critical
0
High
6
Medium
15
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
OS Command Injection
2
2
Command Injection
2
3
Buffer Overflow
1

Most Affected Products

1. Kenwood DNR1007XR43
2. ChargePoint Home Flex6
3. Autel MaxiCharger6
4. Phoenix Contact CHARX SEC-31504
5. Autel charger3

Recent Vulnerabilities

See more →
ZDI-26-485
CVSS 7.0high

(Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29066
CVSS 7.0high

ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29070
CVSS 6.6medium

ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-490
CVSS 6.6medium

(Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-489
CVSS 6.8medium

(Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-28981
CVSS 6.8medium

ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-28980
CVSS 6.8medium

ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-486
CVSS 6.8medium

(Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-487
CVSS 7.8high

(Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29111
CVSS 7.8high

ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch

Monitor kenwood in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.