CWE-1191
20 CVEs classified under CWE-1191. Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-48970 | Critical | 9.3 | 2024-11-14 | The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an o… |
CVE-2025-65821 | High | 7.5 | 2025-12-10 | As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive inf… |
CVE-2023-32666 | High | 7.2 | 2024-03-14 | On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may al… |
CVE-2025-65822 | Medium | 6.8 | 2025-12-10 | The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an at… |
CVE-2025-26409 | Medium | 6.8 | 2025-02-11 | A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is… |
CVE-2022-43096 | Medium | 6.8 | 2022-11-17 | Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. |
CVE-2020-9285 | Medium | 6.8 | 2022-10-20 | Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI E… |
CVE-2025-7213 | Medium | 6.4 | 2025-07-09 | A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The m… |
CVE-2025-47822 | Medium | 6.4 | 2025-06-27 | Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control. |
CVE-2025-47819 | Medium | 6.4 | 2025-06-27 | Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control. |
CVE-2025-48468 | Medium | 6.4 | 2025-06-24 | Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware. |
CVE-2025-26408 | Medium | 6.1 | 2025-02-11 | The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is… |
CVE-2025-12114 | Medium | 5.5 | 2025-10-23 | Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4… |
CVE-2024-4231 | Medium | 4.6 | 2024-05-14 | This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial… |
CVE-2025-15083 | Low | 2.0 | 2025-12-25 | A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulatio… |
CVE-2025-52533 | | 2026-02-12 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentia… | |
CVE-2024-36319 | | 2026-02-12 | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to per… | |
CVE-2025-36755 | | 2025-12-12 | The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions. Researche… | |
CVE-2025-9709 | | 2025-09-05 | On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor n… | |
CVE-2024-41692 | | 2024-07-26 | This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An… |