CWE-1242 · 14 records
Inclusion of Undocumented Features or Chicken Bits
CVEs in this class
14 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-12176No exploit | Undocumented Administrative Accountsazure-access · blu-ic2 firmware · CWE-1242 | Critical10.0 | — | 0.3% | Oct 24, 2025 |
39Monitor | CVE-2025-55050No exploit | CWE-1242: Inclusion of Undocumented Featuresbaicells · nova430e/430i, nova436q, neutrino430, nova846 · CWE-1242 | Critical9.8 | — | 0.3% | Sep 9, 2025 |
37Monitor | CVE-2017-20204No exploit | DBLTek GoIP Telnet Admin Interface Undocumented Backdoordbl technology (dbltek) · goip · CWE-1242 | Critical9.3 | — | 0.6% | Oct 14, 2025 |
35Monitor | CVE-2023-3634No exploit | Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functionsfesto · mse6-c2m-5000-fb36-d-m-rg-bar-m12l4-agd · CWE-1242 | High8.8 | — | 0.6% | Apr 16, 2026 |
34Monitor | CVE-2026-24714No exploit | Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the boxnetgear · netgear products · CWE-1242 | High8.7 | — | 0.2% | Jan 30, 2026 |
32Monitor | CVE-2025-41756No exploit | Arbitrary Write with ubr-editfilembs-solutions · universal bacnet router firmware · CWE-1242 | High8.1 | — | 0.3% | Mar 9, 2026 |
30Monitor | CVE-2024-52564No exploit | Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 ani-o data device, inc. · ud-lt1 · CWE-1242 | High7.5 | — | 0.5% | Dec 5, 2024 |
30Monitor | CVE-2025-22450No exploit | Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.i-o data device, inc. · ud-lt2 · CWE-1242 | High7.5 | — | 0.3% | Jan 22, 2025 |
30Monitor | CVE-2026-82928No exploit | Undocumented access path in mH-DEVELOPERf&f filipowski · mh-developer · CWE-1242 | High7.7 | — | 0.1% | Sep 28, 2026 |
28Monitor | CVE-2024-54457No exploit | Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versionfxc inc. · ae1021 · CWE-1242 | High7.2 | — | 0.4% | Dec 18, 2024 |
27Monitor | CVE-2025-52548No exploit | Enabling SSH and Shellinabox on the vulnerable machinecopeland · e3 supervisory controller firmware · CWE-1242 | Medium6.9 | — | 0.3% | Sep 2, 2025 |
26Monitor | CVE-2024-2103No exploit | Inclusion of Undocumented Featuresschweitzer engineering laboratories · sel-700bt motor bus transfer relay · CWE-1242 | Medium6.5 | — | 0.4% | Apr 4, 2024 |
26Monitor | CVE-2025-41754No exploit | Arbitrary Read with ubr-editfilembs-solutions · universal bacnet router firmware · CWE-1242 | Medium6.5 | — | 0.3% | Mar 9, 2026 |
26Monitor | CVE-2024-7011No exploit | Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525Wsharp display solutions, ltd. · np-cb4500ul · CWE-1242 | Medium6.5 | — | 0.3% | Sep 26, 2024 |
- CVE-2025-1217640Plan
Undocumented Administrative Accounts
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 24, 2025
- CVE-2025-5505039Monitor
CWE-1242: Inclusion of Undocumented Features
CriticalCVSS 9.8No exploitEPSS 0%baicells · nova430e/430i, nova436q, neutrino430, nova846Sep 9, 2025
- CVE-2017-2020437Monitor
DBLTek GoIP Telnet Admin Interface Undocumented Backdoor
CriticalCVSS 9.3No exploitEPSS 0%dbl technology (dbltek) · goipOct 14, 2025
- CVE-2023-363435Monitor
Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions
HighCVSS 8.8No exploitEPSS 0%festo · mse6-c2m-5000-fb36-d-m-rg-bar-m12l4-agdApr 16, 2026
- CVE-2026-2471434Monitor
Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box
HighCVSS 8.7No exploitEPSS 0%netgear · netgear productsJan 30, 2026
- CVE-2025-4175632Monitor
Arbitrary Write with ubr-editfile
HighCVSS 8.1No exploitEPSS 0%mbs-solutions · universal bacnet router firmwareMar 9, 2026
- CVE-2024-5256430Monitor
Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 an
HighCVSS 7.5No exploitEPSS 0%i-o data device, inc. · ud-lt1Dec 5, 2024
- CVE-2025-2245030Monitor
Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.
HighCVSS 7.5No exploitEPSS 0%i-o data device, inc. · ud-lt2Jan 22, 2025
- CVE-2026-8292830Monitor
Undocumented access path in mH-DEVELOPER
HighCVSS 7.7No exploitEPSS 0%f&f filipowski · mh-developerSep 28, 2026
- CVE-2024-5445728Monitor
Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware version
HighCVSS 7.2No exploitEPSS 0%fxc inc. · ae1021Dec 18, 2024
- CVE-2025-5254827Monitor
Enabling SSH and Shellinabox on the vulnerable machine
MediumCVSS 6.9No exploitEPSS 0%copeland · e3 supervisory controller firmwareSep 2, 2025
- CVE-2024-210326Monitor
Inclusion of Undocumented Features
MediumCVSS 6.5No exploitEPSS 0%schweitzer engineering laboratories · sel-700bt motor bus transfer relayApr 4, 2024
- CVE-2025-4175426Monitor
Arbitrary Read with ubr-editfile
MediumCVSS 6.5No exploitEPSS 0%mbs-solutions · universal bacnet router firmwareMar 9, 2026
- CVE-2024-701126Monitor
Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525W
MediumCVSS 6.5No exploitEPSS 0%sharp display solutions, ltd. · np-cb4500ulSep 26, 2024