Topic
Risk introduced by the origin, rebadging, and firmware integrity of procured physical devices.
One Dell rollup alone carried 435 CVEs, among them a kernel privilege-escalation bug that had already shipped in two other Dell advisories. That is why a single vendor feed cannot describe a GPU estate.
Reality
Asus and Comtrend won the same conditional approval for their routers, but theirs expires on March 6, 2028. Buyers now have to check which series and which date cover the box they are ordering.
Reality
SPEAKINGSTONE and DARKLANTERN both hand unauthenticated attackers root on ZBT-built hardware, and because neither advisory names a fixed firmware release, the remedy for an affected model is replacing it.
Reality
The NBU says 279 NERO R-ONE speed cameras are rebadged Russian CORDON PRO.M units with shell access triggered by SMS from hardcoded numbers. Deployment is paused pending an independent audit.
Reality
The NBU says NERO R-ONE cameras bought under a 30-million-euro EU-funded project are rebadged Russian hardware carrying an SMS-triggered backdoor. The contract was the vulnerability.
Reality