Advisories · Weakness
CWE-1191.
Every Advisory and CVE whose sources give the weakness CWE-1191, newest first.
- CVSS 7.2 High
Johnson Controls Neo Series MVP2: - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows…
- Johnson Controls Neo Series MVP2
- CWE-1191
- CVSS 7.2 High
Johnson Controls EasyIO FS32: - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect…
- Johnson Controls EasyIO FS32
- CWE-1191
- CVSS 5.4 Medium
Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71
- TP-Link Systems Inc. Kasa EC70 V4
- TP-Link Systems Inc. Kasa EC71 V4
- CWE-1191
- CVSS 6.8 Medium
Dell Boot Optimized Server Storage (BOSS): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038…
- Dell Boot Optimized Server Storage (BOSS)
- CWE-1191
- CVSS 5.1 Medium
Dell Boot Optimized Server Storage (BOSS): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038…
- Dell Boot Optimized Server Storage (BOSS)
- CWE-1191
- CVSS 7.0 High
Dell Boot Optimized Server Storage (BOSS): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038…
- Dell Boot Optimized Server Storage (BOSS)
- CWE-1191
- CVSS 9.3 CriticalCritical · CVSS 9+
Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software
- Danfoss iC7-Automation SP
- Danfoss iC7-Marine
- CWE-1191
- CVSS 8.6 High
Open Recovery Mode
- Autel MaxiCharger Single
- CWE-1191
- CWE-1244
- CVSS 8.6 High
Access to Bootloader
- Autel MaxiCharger Single
- CWE-1191
- CVSS 6.3 Medium
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potential…
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI MAX Series Processors
- CWE-1191
- CVSS 8.7 High
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 7002 Series Processors
- CWE-1191
- CVSS 1.0 Low
TOZED ZLT M30s UART on-chip debug and test interface with improper access control
- TOZED ZLT M30s
- CWE-1191
- CVSS 2.4 Low
CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard
- CleverDisplay B.V. BlueOne (CleverDisplay Hardware Player)
- CWE-1191
- CWE-1244
- CVSS 6.8 Medium
The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.
- CWE-1191
- CVSS 7.5 High
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the curre…
- CWE-1191
- CVSS 5.2 Medium
Serial Console Enabled
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1191
- CVSS 8.6 High
NRF52810 Runtime EM Fault Injection APPROTECT Bypass
- Nordic Semiconductor nRF52810
- CWE-1191
- CWE-1319
- CVSS 5.4 Medium
FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access control
- FNKvision FNK-GU2
- CWE-1191
- CVSS 6.4 Medium
Flock Safety License Plate Reader: Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip…
- Flock Safety License Plate Reader
- CWE-1191
- CVSS 6.4 Medium
Flock Safety Gunshot Detection devices: Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with…
- Flock Safety Gunshot Detection devices
- CWE-1191
- CVSS 6.4 Medium
Open JTAG Debug Port
- Advantech Wireless Sensing and Equipment (WISE)
- CWE-1191
- CVSS 6.8 Medium
Access to Bootloader and Shell Over Serial Interface
- Wattsense Bridge
- CWE-1191
- CWE-1299
- CVSS 6.1 Medium
Unprotected JTAG Interface
- Wattsense Bridge
- CWE-1191
- CVSS 9.3 CriticalCritical · CVSS 9+
Life2000 Ventilator microcontroller lacks memory protection
- Baxter Life2000 Ventilation System
- CWE-1191
- CVSS 8.6 High
Incorrect Access Control Vulnerability
- SyroTech SY-GPON-1110-WDONT router
- CWE-1191
- CVSS 6.8 Medium
Incorrect Access Control Vulnerability in Digisol Router
- Digisol Router DG-GR1321
- CWE-1191
- CVSS 7.2 High
4th Generation Intel(R) Xeon(R) Processors when using…: On-chip debug and test interface with improper access control in some 4th Generation…
- 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX
- CWE-1191
- CVSS 6.8 Medium
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.
- CWE-1191
- CVSS 6.8 Medium
Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that host…
- CWE-1191