CWE-1263 · Other weaknesses
Improper Physical Access Control
15CVEs
SortMost likely exploited
15 CVEs with CWE-1263 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-32506An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to control the execution of…No vendor recorded · CVSS 6.4 · 2024-05-09 | 6.4 | 0.4% | 2024-05-09 |
| CVE-2026-80253An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without au…Shizen Connect Inc. · ShizenBox2 (dev-conf) · CVSS 7 · 2026-09-03 | 7.0 | 0.3% | 2026-09-03 |
| CVE-2023-1257CVE-2023-1257MOXA · UC-8580 Series · CVSS 7.6 · 2023-03-07 | 7.6 | 0.3% | 2023-03-07 |
| CVE-2024-28326Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.No vendor recorded · CVSS 6.8 · 2024-04-26 | 6.8 | 0.3% | 2024-04-26 |
| CVE-2022-48183A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow…Lenovo · ThinkPad T14s X13 Gen3 BIOS - Windows · CVSS 6.1 · 2023-10-09 | 6.1 | 0.3% | 2023-10-09 |
| CVE-2022-48182A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow…Lenovo · ThinkPad T14s X13 Gen3 BIOS - Windows · CVSS 6.1 · 2023-10-09 | 6.1 | 0.3% | 2023-10-09 |
| CVE-2022-3728A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow…Lenovo · ThinkPad T14s Gen 3 BIOS · CVSS 6.1 · 2023-10-09 | 6.1 | 0.3% | 2023-10-09 |
| CVE-2025-59696Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to modify or e…Entrust · Nshield 5c Firmware · CVSS 3.2 · 2025-12-02 | 3.2 | 0.3% | 2025-12-02 |
| CVE-2025-6785Tesla Model 3 Physical CAN Bus InjectionTesla · Model 3 · CVSS 4.7 · 2025-09-04 | 4.7 | 0.2% | 2025-09-04 |
| CVE-2024-48973Debug port on Life2000 Ventilator serial interface is enabled by defaultBaxter · Life2000 Ventilation System · CVSS 9.3 · 2024-11-14 | 9.3 | 0.2% | 2024-11-14 |
| CVE-2024-39512Junos OS Evolved: User is not logged out when the console cable is disconnectedJuniper Networks · Junos OS Evolved · CVSS 6.6 · 2024-07-10 | 6.6 | 0.2% | 2024-07-10 |
| CVE-2025-8762INSTAR 2K+/4K UART improper physical access controlINSTAR · 2K+ · CVSS 6.8 · 2025-08-13 | 6.8 | 0.2% | 2025-08-13 |
| CVE-2024-36438eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks.No vendor recorded · CVSS 7.3 · 2024-07-15 | 7.3 | 0.2% | 2024-07-15 |
| CVE-2023-38290Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc (versionCode='9020801',…No vendor recorded · CVSS 7.8 · 2024-04-22 | 7.8 | 0.2% | 2024-04-22 |
| CVE-2025-4386Medtronic MyCareLink Patient Monitor Hardware Debug PortMedtronic · MyCareLink Patient Monitor 24950 · CVSS 6.8 · 2026-05-07 | 6.8 | 0.2% | 2026-05-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.