CVE-2026-18273
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The vulnerability in Kenwood DNR1007XR concerns incorrect default permissions on a directory used by the USB filesystem. An attacker with physical access and the ability to execute low-privileged code can escalate privileges and execute arbitrary code as root.
Risk Assessment
The risk to the organization is the potential for an attacker with physical access to gain full control of the device, leading to compromise of system integrity and data.
Recommendation
It is recommended to restrict physical access to the device and apply any updates or patches provided by the vendor if available.
Other vulnerabilities in Kenwood DNR1007XR
See all- CVE-2026-18272Medium
The vulnerability in Kenwood DNR1007XR in the startUpdateProcess method allows command injection. An attacker with physical access, without authentication, can exploit the lack of input validation to execute arbitrary code as root.
- CVE-2026-18271Medium
The vulnerability in the vCardParser class of Kenwood DNR1007XR leads to a heap-based buffer overflow. An attacker with physical access, without authentication, can exploit the lack of input validation to execute arbitrary code as root.
- CVE-2026-18270High
Vulnerability in Kenwood DNR1007XR in the udhcpd service is due to incorrect permissions set on a resource. A local attacker can exploit this flaw to escalate privileges and execute code in the context of root.
- CVE-2026-18269Medium
The vulnerability in the tchdr_bytestream_read function of Kenwood DNR1007XR causes an out-of-bounds write. An attacker with physical access, without authentication, can exploit the lack of data validation to execute arbitrary code as root.
- CVE-2026-18268High
Vulnerability in Kenwood DNR1007XR in the JKGenService is due to lack of proper validation of a user-supplied string before using it to execute a system call. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of root.
- CVE-2026-18267Medium
The vulnerability in the firmware update process of Kenwood DNR1007XR allows the use of symbolic links to move files to arbitrary locations. An attacker with physical access, without authentication, can execute arbitrary code as root.
Original NVD description (English source)
Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the mount point for the USB filesystem. The issue results from incorrect permissions on a directory used by the product. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-29070.