Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for D619 by Qihoo 360

    CVE-2026-121606 (GCVE-0-2026-121606)

    Vulnerability from nvd – Published: 2026-11-04 01:00 – Updated: 2026-11-04 01:00
    VLAI
    Title
    Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification
    Summary
    A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification of cryptographic signature. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
    CWE
    • CWE-347 - Improper Verification of Cryptographic Signature
    • CWE-345 - Insufficient Verification of Data Authenticity
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3796 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/430443 vdb-entrytechnical-description
    https://vuldb.com/vuln/430443/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-121606 third-party-advisory
    https://vuldb.com/submit/1023261 third-party-advisory
    https://gist.github.com/gajgdm6-cpu/cf98af20ddb77… exploit
    Impacted products
    Vendor Product Version
    Qihoo 360 D621-2 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d621-2:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D603-2 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d603-2:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D600-2 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d600-2:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D619 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d619:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D606-6 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d606-6:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D706 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d706:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d621-2:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D621-2",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d603-2:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D603-2",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d600-2:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D600-2",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d619:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D619",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d606-6:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D606-6",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d706:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D706",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "xiaomao (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification of cryptographic signature. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 10,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 10,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 10,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 10,
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:C",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-347",
                  "description": "Improper Verification of Cryptographic Signature",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-345",
                  "description": "Insufficient Verification of Data Authenticity",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-04T01:00:26.282Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-430443 | Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/430443"
            },
            {
              "name": "VDB-430443 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/430443/cti"
            },
            {
              "name": "CVE-2026-121606 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-121606"
            },
            {
              "name": "Submit #1023261 | 360 (Qihoo 360) 360 Smart Camera (IPC) 6.0.24 ~ 6.4.9 Improper Verification of Cryptographic Signature",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/1023261"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://gist.github.com/gajgdm6-cpu/cf98af20ddb77f27a7c112214a6280f7"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-11-03T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-11-03T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-11-03T17:28:58.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification",
          "x_generator": [
            "VulDB PVTS v202611"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-121606",
        "datePublished": "2026-11-04T01:00:26.282Z",
        "dateReserved": "2026-11-03T16:23:40.412Z",
        "dateUpdated": "2026-11-04T01:00:26.282Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-121606 (GCVE-0-2026-121606)

    Vulnerability from cvelistv5 – Published: 2026-11-04 01:00 – Updated: 2026-11-04 01:00
    VLAI
    Title
    Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification
    Summary
    A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification of cryptographic signature. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
    CWE
    • CWE-347 - Improper Verification of Cryptographic Signature
    • CWE-345 - Insufficient Verification of Data Authenticity
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3796 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/430443 vdb-entrytechnical-description
    https://vuldb.com/vuln/430443/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-121606 third-party-advisory
    https://vuldb.com/submit/1023261 third-party-advisory
    https://gist.github.com/gajgdm6-cpu/cf98af20ddb77… exploit
    Impacted products
    Vendor Product Version
    Qihoo 360 D621-2 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d621-2:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D603-2 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d603-2:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D600-2 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d600-2:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D619 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d619:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D606-6 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d606-6:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Qihoo 360 D706 Affected: 6.4.0
    Affected: 6.4.1
    Affected: 6.4.2
    Affected: 6.4.3
    Affected: 6.4.4
    Affected: 6.4.5
    Affected: 6.4.6
    Affected: 6.4.7
    Affected: 6.4.8
    Affected: 6.4.9
        cpe:2.3:a:qihoo_360:d706:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d621-2:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D621-2",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d603-2:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D603-2",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d600-2:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D600-2",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d619:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D619",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d606-6:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D606-6",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:qihoo_360:d706:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Firmware Signature Verification"
              ],
              "product": "D706",
              "vendor": "Qihoo 360",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.4.0"
                },
                {
                  "status": "affected",
                  "version": "6.4.1"
                },
                {
                  "status": "affected",
                  "version": "6.4.2"
                },
                {
                  "status": "affected",
                  "version": "6.4.3"
                },
                {
                  "status": "affected",
                  "version": "6.4.4"
                },
                {
                  "status": "affected",
                  "version": "6.4.5"
                },
                {
                  "status": "affected",
                  "version": "6.4.6"
                },
                {
                  "status": "affected",
                  "version": "6.4.7"
                },
                {
                  "status": "affected",
                  "version": "6.4.8"
                },
                {
                  "status": "affected",
                  "version": "6.4.9"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "xiaomao (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification of cryptographic signature. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 10,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 10,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 10,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 10,
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:C",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-347",
                  "description": "Improper Verification of Cryptographic Signature",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-345",
                  "description": "Insufficient Verification of Data Authenticity",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-04T01:00:26.282Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-430443 | Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/430443"
            },
            {
              "name": "VDB-430443 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/430443/cti"
            },
            {
              "name": "CVE-2026-121606 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-121606"
            },
            {
              "name": "Submit #1023261 | 360 (Qihoo 360) 360 Smart Camera (IPC) 6.0.24 ~ 6.4.9 Improper Verification of Cryptographic Signature",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/1023261"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://gist.github.com/gajgdm6-cpu/cf98af20ddb77f27a7c112214a6280f7"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-11-03T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-11-03T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-11-03T17:28:58.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification",
          "x_generator": [
            "VulDB PVTS v202611"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-121606",
        "datePublished": "2026-11-04T01:00:26.282Z",
        "dateReserved": "2026-11-03T16:23:40.412Z",
        "dateUpdated": "2026-11-04T01:00:26.282Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }