This vulnerability (CWE-347) arises from the absence of signature verification on firmware update packages in VEO and VEO-XS Wi-Fi monitors. Without verifying cryptographic signatures, an attacker with the ability to intercept or control the update delivery process can install malicious or unauthorized firmware. This affects versions prior to 01.48.001 of the DUOX PLUS monitor firmware (VEO Wi-Fi range). The CVSS 4.0 base score is 7.7, indicating a high severity due to the attack vector being adjacent network, low attack complexity, and no required privileges or user interaction.

An attacker who controls the update delivery channel can install unauthorized firmware on affected devices, potentially leading to full compromise of the device's functionality and security. This could enable persistent unauthorized access or manipulation of the device.

A fixed version 01.48.001 or later should be applied to remediate this vulnerability. Since no patch links or vendor advisory details are provided, users should verify with Fermax Electronica S.A.U. for official firmware updates and apply them promptly. Until patched, restricting update delivery channels to trusted sources may reduce risk.