Skip to content
BackEsc
Sign in

CWE-1263 · weakness in Other weaknesses

Improper Physical Access Control

15 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

  1. An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to control the execution of…CVE-2022-32506CVSS 6.4 · 0.4% likely
  2. An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without au…CVE-2026-80253Shizen Connect Inc. · CVSS 7 · 0.3% likely
  3. CVE-2023-1257MOXA · CVSS 7.6 · 0.3% likely

    Moxa

  4. Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.CVE-2024-28326CVSS 6.8 · 0.3% likely
  5. A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow…CVE-2022-48183Lenovo · CVSS 6.1 · 0.3% likely

    Lenovo

  6. A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow…CVE-2022-48182Lenovo · CVSS 6.1 · 0.3% likely

    Lenovo

  7. A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow…CVE-2022-3728Lenovo · CVSS 6.1 · 0.3% likely

    Lenovo

  8. Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to modify or e…CVE-2025-59696Entrust · CVSS 3.2 · 0.3% likely
  9. Tesla Model 3 Physical CAN Bus InjectionCVE-2025-6785Tesla · CVSS 4.7 · 0.2% likely

    Tesla

  10. Debug port on Life2000 Ventilator serial interface is enabled by defaultCVE-2024-48973Baxter · CVSS 9.3 · 0.2% likely

    Baxter

  11. Junos OS Evolved: User is not logged out when the console cable is disconnectedCVE-2024-39512Juniper Networks · CVSS 6.6 · 0.2% likely

    Juniper Networks

  12. INSTAR 2K+/4K UART improper physical access controlCVE-2025-8762INSTAR · CVSS 6.8 · 0.2% likely
  13. eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks.CVE-2024-36438CVSS 7.3 · 0.2% likely
  14. Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc (versionCode='9020801',…CVE-2023-38290CVSS 7.8 · 0.2% likely
  15. Medtronic MyCareLink Patient Monitor Hardware Debug PortCVE-2025-4386Medtronic · CVSS 6.8 · 0.2% likely

    Medtronic

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in