Skip to content
Noroxi

CWE-1191 · 29 records

On-Chip Debug and Test Interface With Improper Access Control

CVEs in this class

29 records

  • CVE-2026-15203
    37Monitor

    Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

    CriticalCVSS 9.3No exploitEPSS 0%

    danfoss · ic7-automation spAug 26, 2026

  • CVE-2024-48970
    37Monitor

    Life2000 Ventilator microcontroller lacks memory protection

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2025-52533
    34Monitor

    Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi

    HighCVSS 8.7No exploitEPSS 0%

    amd · amd epyc™ 7003 series processorsFeb 12, 2026

  • CVE-2024-41692
    34Monitor

    Incorrect Access Control Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    syrotech · syrotech sy-gpon-1110-wdont routerJul 26, 2024

  • CVE-2025-9709
    34Monitor

    NRF52810 Runtime EM Fault Injection APPROTECT Bypass

    HighCVSS 8.6No exploitEPSS 0%

    nordic semiconductor · nrf52810Sep 5, 2025

  • CVE-2026-8988
    34Monitor

    Access to Bootloader

    HighCVSS 8.6No exploitEPSS 0%

    autel · maxicharger single charger firmwareJul 21, 2026

  • CVE-2026-8989
    34Monitor

    Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware reco

    HighCVSS 8.6No exploitEPSS 0%

    autel · maxicharger single charger firmwareJul 21, 2026

  • CVE-2025-65821
    30Monitor

    As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and ret

    HighCVSS 7.5No exploitEPSS 0%

    meatmeet · meatmeet pro wifi & bluetooth meat thermometer firmwareDec 10, 2025

  • CVE-2026-34493
    28Monitor

    - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations.

    HighCVSS 7.2No exploitEPSS 0%

    johnson controls · easyio fs32Oct 1, 2026

  • CVE-2026-34494
    28Monitor

    - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.

    HighCVSS 7.2No exploitEPSS 0%

    johnson controls · neo series mvp2Oct 1, 2026

  • CVE-2023-32666
    28Monitor

    On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or

    HighCVSS 7.2No exploitEPSS 0%

    Mar 14, 2024

  • CVE-2026-80357
    28Monitor

    Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access

    HighCVSS 7.0No exploitEPSS 0%

    dell · boot optimized server storage (boss)Sep 28, 2026

  • CVE-2024-4231
    27Monitor

    Incorrect Access Control Vulnerability in Digisol Router

    MediumCVSS 6.8Proof of conceptEPSS 0%

    digisol · digisol router dg-gr1321May 14, 2024

  • CVE-2022-43096
    27Monitor

    Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.

    MediumCVSS 6.8Proof of conceptEPSS 0%

    m5t · mediatrix 4102s firmwareNov 17, 2022

  • CVE-2020-9285
    27Monitor

    Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attache

    MediumCVSS 6.8No exploitEPSS 0%

    sonos · one firmwareOct 20, 2022

  • CVE-2025-26409
    27Monitor

    Access to Bootloader and Shell Over Serial Interface

    MediumCVSS 6.8No exploitEPSS 0%

    wattsense · wattsense bridgeFeb 11, 2025

  • CVE-2025-47819
    27Monitor

    Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

    MediumCVSS 6.8No exploitEPSS 0%

    flocksafety · gunshot detection firmwareJun 26, 2025

  • CVE-2025-47822
    27Monitor

    Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.

    MediumCVSS 6.8No exploitEPSS 0%

    flocksafety · license plate reader firmwareJun 26, 2025

  • CVE-2025-65822
    27Monitor

    The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.

    MediumCVSS 6.8No exploitEPSS 0%

    meatmeet · meatmeet pro wifi & bluetooth meat thermometer firmwareDec 10, 2025

  • CVE-2026-80359
    27Monitor

    Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access

    MediumCVSS 6.8No exploitEPSS 0%

    dell · boot optimized server storage (boss)Sep 28, 2026

  • CVE-2025-48468
    25Monitor

    Open JTAG Debug Port

    MediumCVSS 6.4No exploitEPSS 0%

    advantech · wise-4010lan firmwareJun 23, 2025

  • CVE-2024-36319
    25Monitor

    Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causin

    MediumCVSS 6.3No exploitEPSS 0%

    amd · amd ryzen™ 7040 series mobile processors with radeon™ graphics; amd ryzen™ 8040 series mobile processors with radeon™ graphicsFeb 12, 2026

  • CVE-2025-26408
    24Monitor

    Unprotected JTAG Interface

    MediumCVSS 6.1No exploitEPSS 0%

    wattsense · wattsense bridgeFeb 11, 2025

  • CVE-2026-102370
    21Monitor

    Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

    MediumCVSS 5.4No exploitEPSS 0%

    tp-link systems inc. · kasa ec70 v4Oct 1, 2026

  • CVE-2025-12114
    20Monitor

    Serial Console Enabled

    MediumCVSS 5.2No exploitEPSS 0%

    azure-access · blu-ic2 firmwareOct 23, 2025

All vulnerability classes