Active Debug Code

Every one of the 100 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Four-Faith F3x36 - Authentication BypassCVE-2024-9643Four-Faith · CVSS 9.8 · 3.0% likely

   Four-Faith

2. Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File ReadCVE-2026-9133AWS · CVSS 7.7 · 1.1% likely

   AWS

3. A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to authenticatio…CVE-2023-32645Yifan · CVSS 9.8 · 55% likely

   Yifan

4. In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-o…CVE-2017-5259Cambium Networks · 33% likely

   Cambium Networks

5. Cisco Redundancy Configuration Manager Debug Remote Code Execution VulnerabilityCVE-2022-20649Cisco · CVSS 8.1 · 12% likely

   Cisco

6. A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote…CVE-2022-38715Siretta · CVSS 7.2 · 3.8% likely

   Siretta

7. Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbit…CVE-2018-5454Philips · 3.4% likely

   Philips

8. An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lea…CVE-2022-29520abode systems, inc. · CVSS 8.1 · 3.1% likely

   Abode

9. A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An a…CVE-2022-32585Robustel · CVSS 9.1 · 3.0% likely

   Robustel

10. A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker wi…CVE-2021-3972Lenovo · CVSS 6.7 · 2.9% likely

    Lenovo

11. A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary comma…CVE-2022-25995InHand Networks · CVSS 9.9 · 2.9% likely

    InHand Networks

12. Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering…CVE-2020-5763Grandstream HT800 Series · 2.7% likely
13. Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionalit…CVE-2020-5756Tenable · 2.5% likely

    Tenable

14. A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted HTTP request can lead to arb…CVE-2022-29888InHand Networks · CVSS 6.5 · 1.6% likely

    InHand Networks

15. An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote attacker to execute arbitrary code via a crafted HTML page.CVE-2021-33591NAVER · 1.6% likely

    NAVER

16. A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests ca…CVE-2024-21785AutomationDirect · CVSS 9.8 · 1.5% likely

    AutomationDirect

17. A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network packet can lead to command ex…CVE-2023-34346Yifan · CVSS 9.8 · 1.4% likely

    Yifan

18. Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all…CVE-2022-33971OMRON Corporation · CVSS 8.3 · 1.3% likely

    OMRON Corporation

19. A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow…CVE-2021-3971Lenovo · CVSS 6.7 · 1.2% likely

    Lenovo

20. A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of network requests can lead to arbitrary firmwa…CVE-2021-40419CVSS 10 · 1.2% likely
21. Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote un…CVE-2023-22357OMRON Corporation · CVSS 9.8 · 1.2% likely

    OMRON Corporation

22. Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-seriesCVE-2022-33323Mitsubishi Electric Corporation · CVSS 7.5 · 1.2% likely

    Mitsubishi Electric

23. B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusCVE-2020-25156B. Braun Melsungen AG · CVSS 7.2 · 1.2% likely

    B. Braun Melsungen AG

24. Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary…CVE-2024-29511Artifex · CVSS 7.5 · 1.1% likely

    Artifex

25. A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted network request can lead to arbitrary c…CVE-2022-28689InHand Networks · CVSS 6.5 · 1.1% likely

    InHand Networks

26. Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface ModuleCVE-2023-1618Mitsubishi Electric Corporation · CVSS 7.5 · 1.1% likely

    Mitsubishi Electric

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.