# CWE-489.

Every Advisory and CVE whose sources give the weakness CWE-489, newest first.

## Records, newest first (an older page)

- [Active debug code in LevelOne WBR-6013](https://agentprime.io/advisories/CVE-2023-49593.md)
  `CVE-2023-49593` · CVE record: LevelOne WBR-6013 · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-489
- [Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLangua…](https://agentprime.io/advisories/CVE-2024-29511.md)
  `CVE-2024-29511` · CVE record · CVSS 7.5 High · Not analysed yet · Published 3 Jul 2024 · Tags: CWE-489
- [Active debug code in Tp-Link ER7206 Omada Gigabit VPN Router](https://agentprime.io/advisories/CVE-2024-21827.md)
  `CVE-2024-21827` · CVE record: Tp-Link ER7206 Omada Gigabit VPN Router · CVSS 7.2 High · Not analysed yet · Published 25 Jun 2024 · Tags: CWE-489
- [Active debug code in AutomationDirect P3-550E](https://agentprime.io/advisories/CVE-2024-21785.md)
  `CVE-2024-21785` · CVE record: AutomationDirect P3-550E · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2024 · Tags: CWE-489
- [CyberPower PowerPanel business Active Debug Code](https://agentprime.io/advisories/CVE-2024-32047.md)
  `CVE-2024-32047` · CVE record: CyberPower PowerPanel business · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 May 2024 · Tags: CWE-489
- [Active debug code in RoamWiFi Technology Co., Ltd. RoamWiFi R10](https://agentprime.io/advisories/CVE-2024-31406.md)
  `CVE-2024-31406` · CVE record: RoamWiFi Technology Co., Ltd. RoamWiFi R10 · CVSS 8.8 High · Not analysed yet · Published 24 Apr 2024 · Tags: CWE-489
- [Active debug code in PLANEX COMMUNICATIONS INC. MZK-MF300N and others](https://agentprime.io/advisories/CVE-2024-30219.md)
  `CVE-2024-30219` · CVE record: PLANEX COMMUNICATIONS INC. MZK-MF300N and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-489
- [Active debug code in NEC Corporation WG1800HP4 and others](https://agentprime.io/advisories/CVE-2024-28008.md)
  `CVE-2024-28008` · CVE record: NEC Corporation WG1800HP4 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-489
- [Quantum HD Unity](https://agentprime.io/advisories/CVE-2023-4804.md)
  `CVE-2023-4804` · CVE record: Johnson Controls Quantum HD Unity Compressor and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Nov 2023 · Tags: CWE-489
- [Active debug code in Yifan YF325](https://agentprime.io/advisories/CVE-2023-32645.md)
  `CVE-2023-32645` · CVE record: Yifan YF325 · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.55 · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-489
- [Active debug code in Yifan YF325](https://agentprime.io/advisories/CVE-2023-34346.md)
  `CVE-2023-34346` · CVE record: Yifan YF325 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-489
- [ioLogik 4000 Series: Existence of an Unauthorized Service](https://agentprime.io/advisories/CVE-2023-4227.md)
  `CVE-2023-4227` · CVE record: Moxa ioLogik 4000 Series · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2023 · Tags: CWE-489
- [Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras](https://agentprime.io/advisories/CVE-2023-0954.md)
  `CVE-2023-0954` · CVE record: Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Illustra Pro Gen 4 Dome and 1 more · CVSS 8.3 High · Not analysed yet · Published 8 Jun 2023 · Tags: CWE-489
- [Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module](https://agentprime.io/advisories/CVE-2023-1618.md)
  `CVE-2023-1618` · CVE record: Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 · CVSS 7.5 High · Not analysed yet · Published 19 May 2023 · Tags: CWE-489
- [Active debug code in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21496.md)
  `CVE-2023-21496` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 4 May 2023 · Tags: CWE-489
- [QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)](https://agentprime.io/advisories/CVE-2022-27597.md)
  `CVE-2022-27597` · CVE record: QNAP Systems Inc. QTS and 1 more · CVSS 2.7 Low · Not analysed yet · Published 29 Mar 2023 · Tags: Memory corruption, CWE-489, CWE-1295
- [SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.](https://agentprime.io/advisories/CVE-2022-45677.md)
  `CVE-2022-45677` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Feb 2023 · Tags: CWE-489
- [Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series](https://agentprime.io/advisories/CVE-2022-33323.md)
  `CVE-2022-33323` · CVE record: Mitsubishi Electric Corporation MELFA SD/SQ Series Controller CR1DA-771 of RV-2SD and 4 more · CVSS 7.5 High · Not analysed yet · Published 2 Feb 2023 · Tags: CWE-489
- [Active debug code in Siretta QUARTZ-GOLD](https://agentprime.io/advisories/CVE-2022-38715.md)
  `CVE-2022-38715` · CVE record: Siretta QUARTZ-GOLD · CVSS 7.2 High · Not analysed yet · Published 26 Jan 2023 · Tags: CWE-489
- [Active debug code in OMRON Corporation CP1L-EL20DR-D](https://agentprime.io/advisories/CVE-2023-22357.md)
  `CVE-2023-22357` · CVE record: OMRON Corporation CP1L-EL20DR-D · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jan 2023 · Tags: CWE-489
- [Active debug code in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-30543.md)
  `CVE-2022-30543` · CVE record: InHand Networks InRouter302 · CVSS 4.3 Medium · Not analysed yet · Published 9 Nov 2022 · Tags: CWE-489
- [Active debug code in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-29888.md)
  `CVE-2022-29888` · CVE record: InHand Networks InRouter302 · CVSS 6.5 Medium · Not analysed yet · Published 9 Nov 2022 · Tags: CWE-489
- [Active debug code in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-29481.md)
  `CVE-2022-29481` · CVE record: InHand Networks InRouter302 · CVSS 4.9 Medium · Not analysed yet · Published 9 Nov 2022 · Tags: CWE-489
- [Active debug code in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-28689.md)
  `CVE-2022-28689` · CVE record: InHand Networks InRouter302 · CVSS 6.5 Medium · Not analysed yet · Published 9 Nov 2022 · Tags: CWE-489
- [Active debug code in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-26023.md)
  `CVE-2022-26023` · CVE record: InHand Networks InRouter302 · CVSS 6.5 Medium · Not analysed yet · Published 9 Nov 2022 · Tags: CWE-489
- [Active debug code in abode systems, inc. iota All-In-One Security Kit](https://agentprime.io/advisories/CVE-2022-32760.md)
  `CVE-2022-32760` · CVE record: abode systems, inc. iota All-In-One Security Kit · CVSS 8.6 High · Not analysed yet · Published 25 Oct 2022 · Tags: CWE-489
- [Active debug code in abode systems, inc. iota All-In-One Security Kit](https://agentprime.io/advisories/CVE-2022-29520.md)
  `CVE-2022-29520` · CVE record: abode systems, inc. iota All-In-One Security Kit · CVSS 8.1 High · Not analysed yet · Published 25 Oct 2022 · Tags: CWE-489
- [Contec Health CMS8000](https://agentprime.io/advisories/CVE-2022-38453.md)
  `CVE-2022-38453` · CVE record: Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor · CVSS 3.0 Low · Not analysed yet · Published 13 Sept 2022 · Tags: CWE-489
- [Active debug code in OMRON Corporation Machine automation controller NJ series…](https://agentprime.io/advisories/CVE-2022-33971.md)
  `CVE-2022-33971` · CVE record: OMRON Corporation Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series · CVSS 8.3 High · Not analysed yet · Published 4 Jul 2022 · Tags: CWE-489
- [Active debug code in Robustel R1510](https://agentprime.io/advisories/CVE-2022-32585.md)
  `CVE-2022-32585` · CVE record: Robustel R1510 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2022 · Tags: CWE-489
- [Active debug code in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-25995.md)
  `CVE-2022-25995` · CVE record: InHand Networks InRouter302 · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2022 · Tags: CWE-489
- [Active debug code in Lenovo Notebook BIOS](https://agentprime.io/advisories/CVE-2021-3972.md)
  `CVE-2021-3972` · CVE record: Lenovo Notebook BIOS · CVSS 6.7 Medium · Not analysed yet · Published 22 Apr 2022 · Tags: CWE-489
- [Active debug code in Lenovo Notebook BIOS](https://agentprime.io/advisories/CVE-2021-3971.md)
  `CVE-2021-3971` · CVE record: Lenovo Notebook BIOS · CVSS 6.7 Medium · Not analysed yet · Published 22 Apr 2022 · Tags: CWE-489
- [B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus](https://agentprime.io/advisories/CVE-2020-25156.md)
  `CVE-2020-25156` · CVE record: B. Braun Melsungen AG SpaceCom and 2 more · CVSS 7.2 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-489
- [A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.136_20121102.](https://agentprime.io/advisories/CVE-2021-40419.md)
  `CVE-2021-40419` · CVE record · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Jan 2022 · Tags: CWE-489
- [Possible Access to Debug Functions in Bosch VRM / BVMS](https://agentprime.io/advisories/CVE-2021-23861.md)
  `CVE-2021-23861` · CVE record: Bosch BVMS and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-489
- [Active debug code in Naver Comic Viewer](https://agentprime.io/advisories/CVE-2021-33591.md)
  `CVE-2021-33591` · CVE record: NAVER Naver Comic Viewer · No CVSS score · Not analysed yet · Published 28 May 2021 · Tags: CWE-489
- [Cisco IOS XE Software Active Debug Code Vulnerability](https://agentprime.io/advisories/CVE-2021-1381.md)
  `CVE-2021-1381` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-489
- [Cisco IOS and IOS XE Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1391.md)
  `CVE-2021-1391` · CVE record: Cisco Cisco IOS · CVSS 5.1 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-489
- [Cisco IOS XE Software Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-1398.md)
  `CVE-2021-1398` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.8 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-489
- [Active debug code in Grandstream HT800 Series](https://agentprime.io/advisories/CVE-2020-5763.md)
  `CVE-2020-5763` · CVE record: Grandstream HT800 Series · No CVSS score · Not analysed yet · Published 29 Jul 2020 · Tags: CWE-489
- [Active debug code in Tenable Grandstream GWN7000](https://agentprime.io/advisories/CVE-2020-5756.md)
  `CVE-2020-5756` · CVE record: Tenable Grandstream GWN7000 · No CVSS score · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-489
- [Active debug code in Lenovo BIOS](https://agentprime.io/advisories/CVE-2020-8320.md)
  `CVE-2020-8320` · CVE record: Lenovo BIOS · CVSS 6.4 Medium · Not analysed yet · Published 9 Jun 2020 · Tags: CWE-489
- [ABB System 800xA Information Manager Remote Code Execution](https://agentprime.io/advisories/CVE-2020-8477.md)
  `CVE-2020-8477` · CVE record: ABB System 800xA Information Manager · CVSS 8.8 High · Not analysed yet · Published 22 Apr 2020 · Tags: Cross-site scripting (XSS), CWE-489
- [Active debug code in Siemens AG TIM 3V-IE (incl. SIPLUS NET variants) and others](https://agentprime.io/advisories/CVE-2019-10939.md)
  `CVE-2019-10939` · CVE record: Siemens AG TIM 3V-IE (incl. SIPLUS NET variants) and 4 more · No CVSS score · Not analysed yet · Published 14 Apr 2020 · Tags: CWE-489
- [Active debug code in Philips IntelliSpace Portal](https://agentprime.io/advisories/CVE-2018-5454.md)
  `CVE-2018-5454` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-489
- [Active debug code in Cambium Networks cnPilot](https://agentprime.io/advisories/CVE-2017-5259.md)
  `CVE-2017-5259` · CVE record: Cambium Networks cnPilot · No CVSS score · EPSS 0.33 · Not analysed yet · Published 20 Dec 2017 · Tags: CWE-489

Newest: <https://agentprime.io/advisories/tag/cwe-489.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-489&cursor=WyIyMDI0LTA3LTE3VDA4OjQ4OjMzLjUyNDAwMFoiLCJDVkUtMjAyNC0zNjQ3NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-489/?cursor=WyIyMDI0LTA3LTE3VDA4OjQ4OjMzLjUyNDAwMFoiLCJDVkUtMjAyNC0zNjQ3NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.