Advisories · Weakness
CWE-912.
Every Advisory and CVE whose sources give the weakness CWE-912, newest first.
- CVSS 9.3 CriticalCritical · CVSS 9+
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
- D-Link DIR-505
- CWE-912
- CVSS 7.0 High
DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution
- DJI CrystalSky ZS600C
- CWE-912
- CVSS 8.6 High
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.
- Atsumi Electric Co., Ltd. ADX5004
- Atsumi Electric Co., Ltd. ADX5008
- CWE-912
- CVSS 6.9 Medium
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd.
- Atsumi Electric Co., Ltd. ADX5004
- Atsumi Electric Co., Ltd. ADX5008
- CWE-912
- CVSS 8.9 High
Netis EAP930 CGI Endpoint debug return200 backdoor
- Netis EAP930
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+
Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
- Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
- CWE-912
- CVSS 8.7 High
LITE-ON Technology Corporation FF-RFI079I4: Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4…
- LITE-ON Technology Corporation FF-RFI079I4
- LITE-ON Technology Corporation FF-RFI078I4
- CWE-912
- CVSS 10.0 CriticalCritical · CVSS 9+
Link Factory - Backdoor
- Link Factory
- CWE-912
- CVSS 7.2 High
Pulsetto Vagus Nerve Stimulator Hidden Functionality
- Pulsetto Vagus Nerve Stimulator
- CWE-912
- CVSS 9.8 CriticalCritical · CVSS 9+
Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
- google-maps-easy-pro
- supsystic-gallery-pro
- CWE-912
- CVSS 10.0 CriticalCritical · CVSS 9+
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
- Premium SEO
- CWE-912
- CVSS 10.0 CriticalCritical · CVSS 9+
MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise
- MonsterInsights Pro
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+
Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
- Puwell Technology Inc. IP Camera
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+
Vacron｜IP Camera - Hidden Functionality
- Vacron VIN-DS783E-E6
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+
Unauthenticated Access to Internal Diagnostic Interface
- WAGO 0765-110x/0100-0000
- WAGO 0765-120x/0100-0000
- CWE-912
- CVSS 7.2 High
Persistent undocumented backdoor access in Yarbo robot
- Yarbo Firmware
- CWE-912
- CVSS 9.2 CriticalCritical · CVSS 9+
WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints
- Snap One, LLC WattBox 800
- Snap One, LLC WattBox 820
- Hard-coded credentials
- CWE-912
- CVSS 9.8 CriticalCritical · CVSS 9+
Denial of service via the undocumented subfunction in AS320T
- DeltaWW AS320T
- CWE-912
- CVSS 7.8 High
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
- Command injection
- CWE-912
<38.8.6 || >=39.0.0-alpha.1, <39.8.0 || >=40.0.0-alpha.1, <40.7.0 || >=41.0.0-alpha.1, <41.0.0-beta.8 · fixed in 38.8.6, 39.8.0, 40.7.0, 41.0.0-beta.8
GHSA-9wfr-w7mm-pc7f · CVE-2026-34769 - CVSS 6.3 Medium
Hidden Functionality vulnerability in NEC Platforms, Ltd.
- NEC Platforms, Ltd. Aterm W1200EX(-MS)
- NEC Platforms, Ltd. Aterm WG1200HP2
- CWE-912
- CVSS 8.6 High
BUFFALO INC. BUFFALO Wi-Fi router products: Hidden functionality issue exists in BUFFALO Wi-Fi router products…
- BUFFALO INC. BUFFALO Wi-Fi router products
- CWE-912
- CVSS 8.5 High
Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
- Nexxt Solutions Nebula 300+
- CWE-912
- CVSS 10.0 CriticalCritical · CVSS 9+
Hidden CLI Function Allows Root Access
- WAGO Lean Managed Switch 852-1812
- WAGO Lean Managed Switch 852-1813
- CWE-912
- CVSS 9.1 CriticalCritical · CVSS 9+
The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB
- CWE-912
- CVSS 6.4 Medium
Fortinet FortiAnalyzer: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3…
- Fortinet FortiAnalyzer
- Fortinet FortiAnalyzer Cloud
- CWE-912
- CVSS 7.5 High
EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor
- EFM ipTIME A8004T
- CWE-912
- CVSS 6.9 Medium
Brother Industries, Ltd. Multiple MFPs: Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd…
- Brother Industries, Ltd. Multiple MFPs
- Konica Minolta, Inc. Multiple MFPs
- CWE-912
- CVSS 9.5 CriticalCritical · CVSS 9+
Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.
- Sharp Display Solutions, Ltd. NP-P627UL, NP-P627ULG, NP-P627UL+, NP-P547UL, NP-P547ULG, NP-P607UL+, NP-CG6600UL, NP-H6271UL, NP-H5471UL, NP-P627ULH, NP-P547ULH, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CG6500XL, NP-CG6400UL, NP-CG6400WL, NP-CB4500XL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME382U, NP-ME382UG, NP-ME402X, NP-ME402XG, NP-P525UL, NP-P525ULG, NP-P525UL+, NP-P525WL, NP-P525WLG, NP-P525WL+, NP-P605UL, NP-P605ULG, NP-P605UL+, NP-CG6500UL, NP-CG6500WL, NP-CB4500UL, NP-CB4500WL, NP-P525ULH, NP-P525WLH, NP-P605ULH, NP-P554U, NP-P554UG, NP-P554U+, NP-P554W, NP-P554WG, NP-P554W+, NP-P474U, NP-P474UG, NP-P474W, NP-P474WG, NP-P604XG, NP-P604X+, NP-P603XG, NP-P523X+, NP-PE523XG, NP-PE523X+, NP-CF6600U, NP-CF6600W, NP-CF6700X, NP-CF6500X, NP-CB4600U, NP-P554UH, NP-P554WH, NP-P474UH, NP-P474WH, NP-P604XH, NP-P603XH, NP-PE523XH, NP-P502HL-2, NP-P502WL-2, NP-P502HLG-2, NP-P502WLG ,NP-ME401W, NP-ME361W, NP-ME331W, NP-ME301W, NP-ME401X, NP-ME361X, NP-ME331X, NP-ME301X, NP-ME401WG, NP-ME361WG, NP-ME331WG, NP-ME301WG, NP-ME401XG, NP-ME361XG, NP-ME331XG, NP-ME301XG, NP-CA4155W, NP-CA4350X, NP-CA4255X, NP-CA4155X, NP-CA4115X, NP-MC331WG, NP-MC421XG, NP-MC401XG, NP-MC371XG, NP-MC331XG, NP-MC301XG, NP-CK4155W, NP-CK4255X, NP-CK4155X, NP-CK4055X, NP-CM4150X, NP-CM4050X, NP-CK4155WG, NP-CK4255XG, NP-CK4155XG, NP-CR2165W, NP-CR2305X, NP-CR2275X, NP-CR2165X, NP-CR2155X, NP-CD2115X, NP-CD2105X, NP-CM4151X, NP-CR2276X, NP-CD2116X, NP-P502H, NP-P502W, NP-P452H, NP-P452W
- Sharp Display Solutions, Ltd. NP-P502HG, NP-P502WG, NP-P452HG, NP-P452WG, NP-P502H+, NP-P502W+, NP-CR5450H, NP-CR5450W NP-M363W, NP-M323W, NP-M403X, NP-M363X, NP-M323X, NP-M283X, NP-M403WG, NP-M363WG, NP-M323WG, NP-M403XG, NP-M363XG, NP-M323XG, NP-M283XG, NP-M403W+, NP-M363W+, NP-M323W+, NP-M403X+, NP-M363X+, NP-M323X+, NP-M283X+, NP-M403H, NP-M403HG, NP-M323HG, NP-M403H+, NP-M323H+ NP-MC370X+, NP-MC330X+, NP-MC300X+, NP-MC330W+, NP-MC350XS+, NP-MC320XS+, NP-MC280XS+, NP-MC320WS+, NP-CD2100X, NP-CD2110X, NP-CR2150X, NP-CR2160X, NP-CR2270X, NP-M353WS, NP-M333XS, NP-M353WSG, NP-M303WSG, NP-M333XSG, NP-M353WS+, NP-M303WS+, NP-M333XS+, NP-M353HS+, NP-M323HS+, NP-M303HS+ NP-P502HL, NP-P502WL, NP-P502HLG, NP-P502WLG, NP-P502HL+, NP-P502WL+, , NP-CR5450HL, NP-CR5450WL, NP-UM352W, NP-UM352WG, NP-UM352W+, NP-UM361X, NP-UM351W, NP-UM301XG, NP-UM361XG, NP-UM301WG, NP-UM351WG, NP-UM301X+, NP-UM361X+, NP-UM301W+, NP-UM351W+ NP-P501X, NP-P451X, NP-P451W, NP-P401W, NP-P501XG, NP-P451XG, NP-P451WG, NP-P401WG, NP-PE501XG, NP-P501X+, NP-P451X+, NP-P451W+, NP-P401W+, NP-PE501X+ NP-M271X, NP-M311X, NP-M311W, NP-M271XG, NP-M311XG, NP-M361XG, NP-M271WG, NP-M311WG, NP-M271W+, NP-M311W+ NP-UM330X, NP-UM330W, NP-UM280XG, NP-UM330XG, NP-UM280WG, NP-UM330WG, NP-UM280X+, NP-UM330X+, NP-UM280W+, NP-UM330W+, NP-M280XS+, NP-M320XS+, NP-M350XS+, NP-M350XSG, NP-M300XS+, NP-M300XSG, NP-M300XS, NP-M300WS+, NP-M300WSG, NP-M300WS, NP-M260WS+, NP-M260WSG, NP-M260XS+, NP-M260XSG, NP-P420X+, NP-P420XG, NP-P420X, NP-P350X+, NP-P350XG, NP-P350X, NP-P350WA, NP-P350WG, NP-P350W NP-M350X, NP-M300X, NP-M260X, NP-M230X, NP-M300W, NP-M260W, NP-M350XG, NP-M300XG, NP-M260XG, NP-M230XG, NP-M300WG, NP-M260WG, NP-M350X+, NP-M300X+, NP-M260X+, NP-M230X+, NP-M300W+, NP-M260W+
- CWE-912
- CVSS 2.4 Low
Mercku M6a: Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update…
- Mercku M6a
- CWE-912
- CVSS 8.6 High
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality.
- Ruijie Networks Co., Ltd. RG-EST300
- CWE-912
- CVSS 8.6 High
PiExtract ｜SOOP-CLM - Hidden Functionality
- PiExtract SOOP-CLM
- CWE-912
- CVSS 6.9 Medium
Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE.
- I-O DATA DEVICE, INC. WN-7D36QR
- I-O DATA DEVICE, INC. WN-7D36QR/UE
- CWE-912
- CVSS 8.8 High
Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
- CGM CLININET
- Weak cryptography or TLS
- CWE-912
- CVSS 5.4 Medium
FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor
- FNKvision Y215 CCTV Camera
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
ProFTPD 1.3.3c Backdoor Command Execution
- ProFTPD Project ProFTPD (Professional FTP Daemon)
- CWE-912
- CVSS 5.3 Medium
TOTOLINK N350R Telnet Service formSysTel backdoor
- TOTOLINK N350R
- CWE-912
- CVSS 10.0 CriticalCritical · CVSS 9+
myBB 1.6.4 Backdoor Arbitrary Command Execution
- myBB Group Forum Software
- Code injection
- CWE-912
- CVSS 6.9 Medium
Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B.
- ELECOM CO.,LTD. WRC-BE36QS-B
- ELECOM CO.,LTD. WRC-W701-B
- CWE-912
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Netcore / Netis Routers RCE via UDP Port 53413 Backdoor
- Netcore Technology Router firmware
- Netis Router firmware
- Command injection
- Authentication bypass
- CVSS 5.3 Medium
Conjure Position Department Service Quality Evaluation System head.php eval backdoor
- Conjure Position Department Service Quality Evaluation System
- CWE-912
- CVSS 6.8 Medium
Undocumented Root Shell Access in SIMCom SIM7600G Modem
- SIMCom SIM7600G Modem
- CWE-912
- CVSS 8.1 High
Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations
- eCharge Hardy Barth cPH2 / cPP2 charging stations
- CWE-912
- CVSS 1.9 LowCritical · KEVKEV
TeleMessage archiving backend: The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages…
- TeleMessage archiving backend
- CWE-912
- CVSS 7.2 High
Kentico Xperience: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file…
- Kentico Xperience
- CWE-912
- CVSS 6.6 Medium
Unitree Go1 Robot Dog Backdoor Control Channel
- Unitree Go1
- CWE-912
- CVSS 6.8 Medium
Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
- Espressif ESP32
- CWE-912
- CVSS 7.7 High
The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so.
- Contec Health CMS8000 Patient Monitor
- CWE-912
- CVSS 8.7 High
Elber Communications Equipment Hidden Functionality
- Elber Signum DVB-S/S2 IRD
- Elber Cleber/3 Broadcast Multi-Purpose Platform
- CWE-912
- CVSS 7.7 High
Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor
- Contec Health CMS8000 Patient Monitor
- CWE-912
- CVSS 10.0 CriticalCritical · CVSS 9+
Wavlink AC3000: A static login vulnerability exists in the wctrls functionality of Wavlink AC3000…
- Wavlink AC3000
- CWE-912
- CVSS 7.2 High
Command injection in ASUS Router
- ASUS Router
- Command injection
- CWE-912
- CVSS 9.0 CriticalCritical · CVSS 9+
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks
- SICK AG SICK InspectorP61x
- SICK AG SICK InspectorP62x
- CWE-912
- CVSS 8.8 High
Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or al…
- TAKENAKA ENGINEERING CO., LTD. HDVR-400
- TAKENAKA ENGINEERING CO., LTD. HDVR-800
- CWE-912
- CVSS 9.8 CriticalCritical · CVSS 9+
D-Link WiFi router - Hidden Functionality
- D-Link DIR-X4860 A1
- CWE-912
- CVSS 8.8 High
D-Link WiFi router - Hidden Functionality
- D-Link DIR-X4860 A1
- D-Link COVR-X1870
- CWE-912
- CVSS 5.3 Medium
Siemens SIMATIC Reader RF610R CMIIT: A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)…
- Siemens SIMATIC Reader RF610R CMIIT
- Siemens SIMATIC Reader RF610R ETSI
- CWE-912
- CVSS 7.0 High
Siemens SIMATIC Reader RF610R CMIIT: A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0)…
- Siemens SIMATIC Reader RF610R CMIIT
- Siemens SIMATIC Reader RF610R ETSI
- CWE-912
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.
- Cisco Smart License Utility
- CWE-912
- CVSS 7.5 High
Longse Technology LBH30FE200W: Longse model LBH30FE200W cameras, as well as products based on this device…
- Longse Technology LBH30FE200W
- Zamel ZMB-01/C
- CWE-912
- CVSS 8.8 High
D-Link router - Hidden Backdoor
- D-Link G403
- D-Link G415
- Hard-coded credentials
- CWE-912