İçeriğe atla
Noroxi

CWE-1191 · 29 kayıt

On-Chip Debug and Test Interface With Improper Access Control

Bu sınıftaki CVE’ler

29 kayıt

  • CVE-2026-15203
    37İzleyin

    Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

    KritikCVSS 9,3İstismar yokEPSS %0

    danfoss · ic7-automation sp26 Ağu 2026

  • CVE-2024-48970
    37İzleyin

    Life2000 Ventilator microcontroller lacks memory protection

    KritikCVSS 9,3İstismar yokEPSS %0

    baxter · life2000 ventilation system14 Kas 2024

  • CVE-2025-52533
    34İzleyin

    Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi

    YüksekCVSS 8,7İstismar yokEPSS %0

    amd · amd epyc™ 7003 series processors12 Şub 2026

  • CVE-2024-41692
    34İzleyin

    Incorrect Access Control Vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    syrotech · syrotech sy-gpon-1110-wdont router26 Tem 2024

  • CVE-2026-8988
    34İzleyin

    Access to Bootloader

    YüksekCVSS 8,6İstismar yokEPSS %0

    autel · maxicharger single charger firmware21 Tem 2026

  • CVE-2026-8989
    34İzleyin

    Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware reco

    YüksekCVSS 8,6İstismar yokEPSS %0

    autel · maxicharger single charger firmware21 Tem 2026

  • CVE-2025-9709
    34İzleyin

    NRF52810 Runtime EM Fault Injection APPROTECT Bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    nordic semiconductor · nrf528105 Eyl 2025

  • CVE-2025-65821
    30İzleyin

    As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and ret

    YüksekCVSS 7,5İstismar yokEPSS %0

    meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 Ara 2025

  • CVE-2026-34494
    28İzleyin

    - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.

    YüksekCVSS 7,2İstismar yokEPSS %0

    johnson controls · neo series mvp21 Eki 2026

  • CVE-2026-34493
    28İzleyin

    - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations.

    YüksekCVSS 7,2İstismar yokEPSS %0

    johnson controls · easyio fs321 Eki 2026

  • CVE-2023-32666
    28İzleyin

    On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or

    YüksekCVSS 7,2İstismar yokEPSS %0

    14 Mar 2024

  • CVE-2026-80357
    28İzleyin

    Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access

    YüksekCVSS 7,0İstismar yokEPSS %0

    dell · boot optimized server storage (boss)28 Eyl 2026

  • CVE-2024-4231
    27İzleyin

    Incorrect Access Control Vulnerability in Digisol Router

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    digisol · digisol router dg-gr132114 May 2024

  • CVE-2022-43096
    27İzleyin

    Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    m5t · mediatrix 4102s firmware17 Kas 2022

  • CVE-2020-9285
    27İzleyin

    Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attache

    OrtaCVSS 6,8İstismar yokEPSS %0

    sonos · one firmware20 Eki 2022

  • CVE-2025-26409
    27İzleyin

    Access to Bootloader and Shell Over Serial Interface

    OrtaCVSS 6,8İstismar yokEPSS %0

    wattsense · wattsense bridge11 Şub 2025

  • CVE-2025-47819
    27İzleyin

    Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

    OrtaCVSS 6,8İstismar yokEPSS %0

    flocksafety · gunshot detection firmware26 Haz 2025

  • CVE-2025-47822
    27İzleyin

    Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.

    OrtaCVSS 6,8İstismar yokEPSS %0

    flocksafety · license plate reader firmware26 Haz 2025

  • CVE-2025-65822
    27İzleyin

    The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.

    OrtaCVSS 6,8İstismar yokEPSS %0

    meatmeet · meatmeet pro wifi \& bluetooth meat thermometer firmware10 Ara 2025

  • CVE-2026-80359
    27İzleyin

    Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access

    OrtaCVSS 6,8İstismar yokEPSS %0

    dell · boot optimized server storage (boss)28 Eyl 2026

  • CVE-2025-48468
    25İzleyin

    Open JTAG Debug Port

    OrtaCVSS 6,4İstismar yokEPSS %0

    advantech · wise-4010lan firmware23 Haz 2025

  • CVE-2024-36319
    25İzleyin

    Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causin

    OrtaCVSS 6,3İstismar yokEPSS %0

    amd · amd ryzen™ 7040 series mobile processors with radeon™ graphics; amd ryzen™ 8040 series mobile processors with radeon™ graphics12 Şub 2026

  • CVE-2025-26408
    24İzleyin

    Unprotected JTAG Interface

    OrtaCVSS 6,1İstismar yokEPSS %0

    wattsense · wattsense bridge11 Şub 2025

  • CVE-2026-102370
    21İzleyin

    Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

    OrtaCVSS 5,4İstismar yokEPSS %0

    tp-link systems inc. · kasa ec70 v41 Eki 2026

  • CVE-2025-12114
    20İzleyin

    Serial Console Enabled

    OrtaCVSS 5,2İstismar yokEPSS %0

    azure-access · blu-ic2 firmware23 Eki 2025

Tüm zafiyet sınıfları