# CWE-1191.

Every Advisory and CVE whose sources give the weakness CWE-1191, newest first.

## Records, newest first

- [Johnson Controls Neo Series MVP2: - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows…](https://agentprime.io/advisories/CVE-2026-34494.md)
  `CVE-2026-34494` · CVE record: Johnson Controls Neo Series MVP2 · CVSS 7.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-1191
- [Johnson Controls EasyIO FS32: - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect…](https://agentprime.io/advisories/CVE-2026-34493.md)
  `CVE-2026-34493` · CVE record: Johnson Controls EasyIO FS32 · CVSS 7.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-1191
- [Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71](https://agentprime.io/advisories/CVE-2026-102370.md)
  `CVE-2026-102370` · CVE record: TP-Link Systems Inc. Kasa EC70 V4 and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-1191
- [Dell Boot Optimized Server Storage (BOSS): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038…](https://agentprime.io/advisories/CVE-2026-80359.md)
  `CVE-2026-80359` · CVE record: Dell Boot Optimized Server Storage (BOSS) · CVSS 6.8 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-1191
- [Dell Boot Optimized Server Storage (BOSS): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038…](https://agentprime.io/advisories/CVE-2026-80358.md)
  `CVE-2026-80358` · CVE record: Dell Boot Optimized Server Storage (BOSS) · CVSS 5.1 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-1191
- [Dell Boot Optimized Server Storage (BOSS): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038…](https://agentprime.io/advisories/CVE-2026-80357.md)
  `CVE-2026-80357` · CVE record: Dell Boot Optimized Server Storage (BOSS) · CVSS 7.0 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-1191
- [Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software](https://agentprime.io/advisories/CVE-2026-15203.md)
  `CVE-2026-15203` · CVE record: Danfoss iC7-Automation SP and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-1191
- [Open Recovery Mode](https://agentprime.io/advisories/CVE-2026-8989.md)
  `CVE-2026-8989` · CVE record: Autel MaxiCharger Single · CVSS 8.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-1191, CWE-1244
- [Access to Bootloader](https://agentprime.io/advisories/CVE-2026-8988.md)
  `CVE-2026-8988` · CVE record: Autel MaxiCharger Single · CVSS 8.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-1191
- [Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potential…](https://agentprime.io/advisories/CVE-2024-36319.md)
  `CVE-2024-36319` · CVE record: AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-1191
- [Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.](https://agentprime.io/advisories/CVE-2025-52533.md)
  `CVE-2025-52533` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 8.7 High · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-1191
- [TOZED ZLT M30s UART on-chip debug and test interface with improper access control](https://agentprime.io/advisories/CVE-2025-15083.md)
  `CVE-2025-15083` · CVE record: TOZED ZLT M30s · CVSS 1.0 Low · Not analysed yet · Published 25 Dec 2025 · Tags: CWE-1191
- [CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard](https://agentprime.io/advisories/CVE-2025-36755.md)
  `CVE-2025-36755` · CVE record: CleverDisplay B.V. BlueOne (CleverDisplay Hardware Player) · CVSS 2.4 Low · Not analysed yet · Published 12 Dec 2025 · Tags: CWE-1191, CWE-1244
- [The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.](https://agentprime.io/advisories/CVE-2025-65822.md)
  `CVE-2025-65822` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-1191
- [As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the curre…](https://agentprime.io/advisories/CVE-2025-65821.md)
  `CVE-2025-65821` · CVE record · CVSS 7.5 High · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-1191
- [Serial Console Enabled](https://agentprime.io/advisories/CVE-2025-12114.md)
  `CVE-2025-12114` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 5.2 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-1191
- [NRF52810 Runtime EM Fault Injection APPROTECT Bypass](https://agentprime.io/advisories/CVE-2025-9709.md)
  `CVE-2025-9709` · CVE record: Nordic Semiconductor nRF52810 · CVSS 8.6 High · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-1191, CWE-1319
- [FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access control](https://agentprime.io/advisories/CVE-2025-7213.md)
  `CVE-2025-7213` · CVE record: FNKvision FNK-GU2 · CVSS 5.4 Medium · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-1191
- [Flock Safety License Plate Reader: Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip…](https://agentprime.io/advisories/CVE-2025-47822.md)
  `CVE-2025-47822` · CVE record: Flock Safety License Plate Reader · CVSS 6.4 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: CWE-1191
- [Flock Safety Gunshot Detection devices: Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with…](https://agentprime.io/advisories/CVE-2025-47819.md)
  `CVE-2025-47819` · CVE record: Flock Safety Gunshot Detection devices · CVSS 6.4 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: CWE-1191
- [Open JTAG Debug Port](https://agentprime.io/advisories/CVE-2025-48468.md)
  `CVE-2025-48468` · CVE record: Advantech Advantech Wireless Sensing and Equipment (WISE) · CVSS 6.4 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-1191
- [Access to Bootloader and Shell Over Serial Interface](https://agentprime.io/advisories/CVE-2025-26409.md)
  `CVE-2025-26409` · CVE record: Wattsense Wattsense Bridge · CVSS 6.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1191, CWE-1299
- [Unprotected JTAG Interface](https://agentprime.io/advisories/CVE-2025-26408.md)
  `CVE-2025-26408` · CVE record: Wattsense Wattsense Bridge · CVSS 6.1 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1191
- [Life2000 Ventilator microcontroller lacks memory protection](https://agentprime.io/advisories/CVE-2024-48970.md)
  `CVE-2024-48970` · CVE record: Baxter Life2000 Ventilation System · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2024 · Tags: CWE-1191
- [Incorrect Access Control Vulnerability](https://agentprime.io/advisories/CVE-2024-41692.md)
  `CVE-2024-41692` · CVE record: SyroTech SyroTech SY-GPON-1110-WDONT router · CVSS 8.6 High · Not analysed yet · Published 26 Jul 2024 · Tags: CWE-1191
- [Incorrect Access Control Vulnerability in Digisol Router](https://agentprime.io/advisories/CVE-2024-4231.md)
  `CVE-2024-4231` · CVE record: Digisol Digisol Router DG-GR1321 · CVSS 6.8 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-1191
- [4th Generation Intel(R) Xeon(R) Processors when using…: On-chip debug and test interface with improper access control in some 4th Generation…](https://agentprime.io/advisories/CVE-2023-32666.md)
  `CVE-2023-32666` · CVE record: 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX · CVSS 7.2 High · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-1191
- [Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.](https://agentprime.io/advisories/CVE-2022-43096.md)
  `CVE-2022-43096` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 17 Nov 2022 · Tags: CWE-1191
- [Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that host…](https://agentprime.io/advisories/CVE-2020-9285.md)
  `CVE-2020-9285` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2022 · Tags: CWE-1191

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1191>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1191/>. Everything for agents: <https://agentprime.io/llms.txt>.