pengutronix
Security Risk Profile
57
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 5, 2019 to present
13
Total CVEs
11
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
57/100
medium
Severity Distribution
Critical
3High
8Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
3
2
Integer Overflow
2
Most Affected Products
1. Pengutronix barebox13
2. DENX U-Boot5
3. barebox barebox5
4. Pengutronix RAUC2
5. Das U-Boot Das U-Boot1
Recent Vulnerabilities
See more →CVE-2026-46728
CVSS 8.8high
5/16/2026
CVE-2026-34963
CVSS 8.6high
barebox EFI PE Loader Memory Safety Vulnerabilities
5/11/2026🔧 No Patch
CVE-2026-34962
CVSS 6.9medium
barebox ext4 Directory Parsing Infinite Loop Denial of Service
5/11/2026🔧 No Patch
CVE-2026-34961
CVSS 6.9medium
barebox ext4 Extent Parsing Out-of-Bounds Read
5/11/2026🔧 No Patch
CVE-2026-34960
CVSS 7.1high
barebox Out-of-Bounds Read in DHCP Option Parsing
5/11/2026🔧 No Patch
CVE-2026-34155
CVSS 7.2high
RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB
3/31/2026🔧 No Patch
CVE-2026-33243
CVSS 8.3EPSS 0%high
barebox: FIT Signature Verification Bypass Vulnerability
3/20/2026
CVE-2021-37848
CVSS 7.5high
8/2/2021
CVE-2021-37847
CVSS 7.5high
8/2/2021
CVE-2020-25860
CVSS 7.1high
12/21/2020🔧 No Patch
Monitor pengutronix in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.