A flaw in OpenWrt's Attended Sysupgrade feature used to build custom, on-demand firmware images could have allowed for the distribution of malicious firmware packages.

OpenWrt is an open source, Linux-based operating system designed for embedded devices like routers. The project has been around for two decades at this point, and can now be installed on thousands ...