CWE-1191

On-Chip Debug and Test Interface With Improper Access Control

9 CVEs Avg CVSS 6.7 MITRE
0
CRITICAL
1
HIGH
6
MEDIUM
0
LOW
0
POC
0
KEV

Monthly

CVE-2025-52533 Monitor

Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.

Authentication Bypass
NVD
EPSS
0.0%
CVE-2024-36319 Monitor

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

Information Disclosure
NVD
EPSS
0.0%
CVE-2025-9709 HIGH This Month

On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass
NVD
CVSS 4.0
8.6
EPSS
0.0%
CVE-2025-7213 MEDIUM This Month

A security vulnerability in FNKvision FNK-GU2 (CVSS 6.4). Remediation should follow standard vulnerability management procedures.

Information Disclosure
NVD VulDB
CVSS 3.1
6.4
EPSS
0.0%
CVE-2025-47822 MEDIUM This Month

CVE-2025-47822 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.

Information Disclosure License Plate Reader Firmware
NVD
CVSS 3.1
6.4
EPSS
0.0%
CVE-2025-47819 MEDIUM This Month

CVE-2025-47819 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.

Information Disclosure Gunshot Detection Firmware
NVD
CVSS 3.1
6.4
EPSS
0.0%
CVE-2025-48468 MEDIUM This Month

A security vulnerability in Successful exploitation of the vulnerability could allow an attacker that (CVSS 6.4) that allows an attacker that has physical access. Remediation should follow standard vulnerability management procedures.

Code Injection Wise 4010lan Firmware Wise 4060lan Firmware Wise 4050lan Firmware
NVD
CVSS 3.1
6.4
EPSS
0.0%
CVE-2025-26409 MEDIUM This Month

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVSS 3.1
6.8
EPSS
0.1%
CVE-2025-26408 MEDIUM This Month

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVSS 3.1
6.1
EPSS
0.1%
CVE-2025-52533
EPSS 0%
Monitor

Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.

Authentication Bypass
NVD
CVE-2024-36319
EPSS 0%
Monitor

Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system.

Information Disclosure
NVD
CVE-2025-9709
EPSS 0% CVSS 8.6
HIGH This Month

On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass
NVD
CVE-2025-7213
EPSS 0% CVSS 6.4
MEDIUM This Month

A security vulnerability in FNKvision FNK-GU2 (CVSS 6.4). Remediation should follow standard vulnerability management procedures.

Information Disclosure
NVD VulDB
CVE-2025-47822
EPSS 0% CVSS 6.4
MEDIUM This Month

CVE-2025-47822 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.

Information Disclosure License Plate Reader Firmware
NVD
CVE-2025-47819
EPSS 0% CVSS 6.4
MEDIUM This Month

CVE-2025-47819 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.

Information Disclosure Gunshot Detection Firmware
NVD
CVE-2025-48468
EPSS 0% CVSS 6.4
MEDIUM This Month

A security vulnerability in Successful exploitation of the vulnerability could allow an attacker that (CVSS 6.4) that allows an attacker that has physical access. Remediation should follow standard vulnerability management procedures.

Code Injection Wise 4010lan Firmware Wise 4060lan Firmware +1
NVD
CVE-2025-26409
EPSS 0% CVSS 6.8
MEDIUM This Month

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVE-2025-26408
EPSS 0% CVSS 6.1
MEDIUM This Month

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy