https://exploit-radar.com/en/flux/categories/materiel.xml Exploit Radar: Hardware, firmware and drivers The latest additions to CISA’s catalog of exploited vulnerabilities in the “Hardware, firmware and drivers” category (indicative classification). 2025-12-17T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2025-59374/ CVE-2025-59374 — ASUS Live Update 2025-12-17T00:00:00Z Apply the patches or mitigations from ASUS; if none are available, stop using the product. For cloud services, follow the guidance from ASUS. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 17, 2025. https://exploit-radar.com/en/cve/CVE-2024-54085/ CVE-2024-54085 — AMI MegaRAC SPx 2025-06-25T00:00:00Z Apply the patches or mitigations from AMI; if none are available, stop using the product. For cloud services, follow the guidance from AMI. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 25, 2025. https://exploit-radar.com/en/cve/CVE-2015-2291/ CVE-2015-2291 — Intel Ethernet Diagnostics Driver for Windows 2023-02-10T00:00:00Z Apply the security update from Intel. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2023. https://exploit-radar.com/en/cve/CVE-2018-19323/ CVE-2018-19323 — GIGABYTE App Center / AORUS (pilote GDrv) 2022-10-24T00:00:00Z Apply the security update from GIGABYTE. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2022. https://exploit-radar.com/en/cve/CVE-2018-19320/ CVE-2018-19320 — GIGABYTE App Center / AORUS (pilote GDrv) 2022-10-24T00:00:00Z Apply the security update from GIGABYTE. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2022. https://exploit-radar.com/en/cve/CVE-2018-19321/ CVE-2018-19321 — GIGABYTE App Center / AORUS (pilote GDrv) 2022-10-24T00:00:00Z Apply the security update from GIGABYTE. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2022. https://exploit-radar.com/en/cve/CVE-2018-19322/ CVE-2018-19322 — GIGABYTE App Center / AORUS (pilote GDrv) 2022-10-24T00:00:00Z Apply the security update from GIGABYTE. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2022. https://exploit-radar.com/en/cve/CVE-2021-21551/ CVE-2021-21551 — Dell dbutil Driver 2022-03-31T00:00:00Z Apply the security update from Dell. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 31, 2022. https://exploit-radar.com/en/cve/CVE-2017-5689/ CVE-2017-5689 — Intel Active Management Technology (AMT) 2022-01-28T00:00:00Z Apply the security update from Intel. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 28, 2022. https://exploit-radar.com/en/cve/CVE-2021-27562/ CVE-2021-27562 — Arm Trusted Firmware 2021-11-03T00:00:00Z Apply the security update from Arm. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.