Skip to content

CWE-249 · weakness in Other weaknesses

CWE-249

6 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
1

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticate…CVE-2019-3932Crestron · 36% likely

    Crestron

  2. Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escal…CVE-2023-33878Intel · CVSS 6.7 · 0.2% likely

    Intel Corporation

  3. Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow…CVE-2023-32655Intel · CVSS 6.7 · 0.2% likely

    Intel Corporation

  4. Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0…CVE-2023-32278Intel · CVSS 6.7 · 0.2% likely

    Intel Corporation

  5. Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-35003Intel · CVSS 6.7 · 0.2% likely

    Intel Corporation

  6. Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially e…CVE-2022-27229Intel · CVSS 6.7 · 0.2% likely

    Intel Corporation

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in