CWE-1191 · Other weaknesses
On-Chip Debug and Test Interface With Improper Access Control
27CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
27 CVEs with CWE-1191 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-4231Incorrect Access Control Vulnerability in Digisol RouterDigisol · Digisol Router DG-GR1321 · CVSS 4.6 · 2024-05-10 | 4.6 | 0.6% | 2024-05-10 |
| CVE-2022-43096Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.M5t · Mediatrix 4102s Firmware · CVSS 6.8 · 2022-11-17 | 6.8 | 0.6% | 2022-11-17 |
| CVE-2020-9285Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the m…Sonos · One Firmware · CVSS 6.8 · 2022-10-20 | 6.8 | 0.5% | 2022-10-20 |
| CVE-2026-15203Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid softwareDanfoss · iC7-Automation SP · CVSS 9.3 · 2026-08-26 | 9.3 | 0.5% | 2026-08-26 |
| CVE-2025-65821As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as det…Meatmeet · Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware · CVSS 7.5 · 2025-12-10 | 7.5 | 0.4% | 2025-12-10 |
| CVE-2025-52533Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.AMD · AMD EPYC™ 7003 Series Processors · CVSS 8.7 · 2026-02-12 | 8.7 | 0.3% | 2026-02-12 |
| CVE-2025-26408Unprotected JTAG InterfaceWattsense · Wattsense Bridge · CVSS 6.1 · 2025-02-11 | 6.1 | 0.3% | 2025-02-11 |
| CVE-2024-41692Incorrect Access Control VulnerabilitySyroTech · SyroTech SY-GPON-1110-WDONT router · CVSS 8.6 · 2024-07-26 | 8.6 | 0.3% | 2024-07-26 |
| CVE-2025-15083TOZED ZLT M30s UART on-chip debug and test interface with improper access controlTOZED · ZLT M30s · CVSS 2 · 2025-12-25 | 2.0 | 0.3% | 2025-12-25 |
| CVE-2025-47819Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.Flock Safety · Gunshot Detection devices · CVSS 6.4 · 2025-06-27 | 6.4 | 0.3% | 2025-06-27 |
| CVE-2025-47822Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.Flock Safety · License Plate Reader · CVSS 6.4 · 2025-06-27 | 6.4 | 0.3% | 2025-06-27 |
| CVE-2026-34494- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63.Johnson Controls · Neo Series MVP2 · CVSS 7.2 · 2026-10-01 | 7.2 | 0.2% | 2026-10-01 |
| CVE-2026-34493- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63.Johnson Controls · EasyIO FS32 · CVSS 7.2 · 2026-10-01 | 7.2 | 0.2% | 2026-10-01 |
| CVE-2025-9709NRF52810 Runtime EM Fault Injection APPROTECT BypassNordic Semiconductor · nRF52810 · CVSS 8.6 · 2025-09-05 | 8.6 | 0.2% | 2025-09-05 |
| CVE-2026-8988Access to BootloaderAutel · MaxiCharger Single · CVSS 8.6 · 2026-07-21 | 8.6 | 0.2% | 2026-07-21 |
| CVE-2025-65822The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical…Meatmeet · Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware · CVSS 6.8 · 2025-12-10 | 6.8 | 0.2% | 2025-12-10 |
| CVE-2024-48970Life2000 Ventilator microcontroller lacks memory protectionBaxter · Life2000 Ventilation System · CVSS 9.3 · 2024-11-14 | 9.3 | 0.2% | 2024-11-14 |
| CVE-2025-7213FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access controlFNKvision · FNK-GU2 · CVSS 6.4 · 2025-07-09 | 6.4 | 0.2% | 2025-07-09 |
| CVE-2025-48468Open JTAG Debug PortAdvantech · Advantech Wireless Sensing and Equipment (WISE) · CVSS 6.4 · 2025-06-24 | 6.4 | 0.2% | 2025-06-24 |
| CVE-2026-102370Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71TP-Link Systems Inc. · Kasa EC70 V4 · CVSS 5.4 · 2026-10-01 | 5.4 | 0.2% | 2026-10-01 |
| CVE-2026-80359Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17…Dell · Boot Optimized Server Storage (BOSS) · CVSS 6.8 · 2026-09-28 | 6.8 | 0.2% | 2026-09-28 |
| CVE-2023-32666On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged use…4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R)… · CVSS 7.2 · 2024-03-14 | 7.2 | 0.2% | 2024-03-14 |
| CVE-2025-54501Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest mem…AMD · AMD EPYC™ 7003 Series Processors · CVSS 5.9 · 2026-11-12 | 5.9 | 0.2% | 2026-11-12 |
| CVE-2024-36319Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW…AMD · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040… · CVSS 6.3 · 2026-02-12 | 6.3 | 0.1% | 2026-02-12 |
| CVE-2026-80357Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17…Dell · Boot Optimized Server Storage (BOSS) · CVSS 7 · 2026-09-28 | 7.0 | 0.1% | 2026-09-28 |
| CVE-2025-12114Serial Console EnabledAzure Access Technology · BLU-IC2 · CVSS 5.2 · 2025-10-23 | 5.2 | 0.1% | 2025-10-23 |
| CVE-2026-80358Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17…Dell · Boot Optimized Server Storage (BOSS) · CVSS 5.1 · 2026-09-28 | 5.1 | 0.1% | 2026-09-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.