CWE-1242 · Supply Chain and Malicious Code
Inclusion of Undocumented Features or Chicken Bits
14CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
14 CVEs with CWE-1242 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-20204DBLTek GoIP Telnet Admin Interface Undocumented BackdoorDBL Technology (DBLTek) · GoIP · CVSS 9.3 · 2025-10-15 | 9.3 | 0.7% | 2025-10-15 |
| CVE-2023-3634Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible FunctionsFesto · MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD · CVSS 8.8 · 2026-04-16 | 8.8 | 0.7% | 2026-04-16 |
| CVE-2024-52564Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disabl…I-O DATA DEVICE, INC. · UD-LT1 · CVSS 7.5 · 2024-12-05 | 7.5 | 0.6% | 2024-12-05 |
| CVE-2024-2103Inclusion of Undocumented FeaturesSchweitzer Engineering Laboratories · SEL-700BT Motor Bus Transfer Relay · CVSS 6.5 · 2024-04-04 | 6.5 | 0.5% | 2024-04-04 |
| CVE-2024-54457Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a…FXC Inc. · AE1021 · CVSS 7.2 · 2024-12-18 | 7.2 | 0.4% | 2024-12-18 |
| CVE-2025-22450Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected produc…I-O DATA DEVICE, INC. · UD-LT2 · CVSS 7.5 · 2025-01-22 | 7.5 | 0.4% | 2025-01-22 |
| CVE-2025-41754Arbitrary Read with ubr-editfileMBS · UBR-01 Mk II · CVSS 6.5 · 2026-03-09 | 6.5 | 0.4% | 2026-03-09 |
| CVE-2025-41756Arbitrary Write with ubr-editfileMBS · UBR-01 Mk II · CVSS 8.1 · 2026-03-09 | 8.1 | 0.4% | 2026-03-09 |
| CVE-2025-52548Enabling SSH and Shellinabox on the vulnerable machineCopeland LP · E3 Supervisory Control · CVSS 6.9 · 2025-09-02 | 6.9 | 0.4% | 2025-09-02 |
| CVE-2025-55050CWE-1242: Inclusion of Undocumented FeaturesBaicells · NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 · CVSS 9.8 · 2025-09-09 | 9.8 | 0.3% | 2025-09-09 |
| CVE-2025-12176Undocumented Administrative AccountsAzure Access Technology · BLU-IC2 · CVSS 10 · 2025-10-24 | 10.0 | 0.3% | 2025-10-24 |
| CVE-2024-7011Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500…Sharp Display Solutions, Ltd. · NP-CB4500UL · CVSS 6.5 · 2024-09-27 | 6.5 | 0.3% | 2024-09-27 |
| CVE-2026-24714Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box.NETGEAR · NETGEAR products · CVSS 8.7 · 2026-01-30 | 8.7 | 0.2% | 2026-01-30 |
| CVE-2026-82928Undocumented access path in mH-DEVELOPERF&F Filipowski · mH-DEVELOPER · CVSS 7.7 · 2026-09-28 | 7.7 | 0.2% | 2026-09-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.