CWE-1299 in Authentication
- CVEs
- 13
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-47944Missing Protection Mechanism for Alternate Hardware Interface | RITTAL GmbH & Co. KG · IoT Interface & CMC III Processing Unit | Unlikely | 6.8 | 0.4% | 2024-10-15 |
| CVE-2025-26409Access to Bootloader and Shell Over Serial Interface | Wattsense · Wattsense Bridge | Unlikely | 6.8 | 0.3% | 2025-02-11 |
| CVE-2023-29060Lack of USB Whitelisting | Becton, Dickinson and Company (BD) · FACSChorus | Unlikely | 5.4 | 0.3% | 2023-11-28 |
| CVE-2026-78862An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB) | – | Unlikely | 6.8 | 0.3% | 2026-10-05 |
| CVE-2025-41697Shell access to UART Console | Phoenix Contact · FL SWITCH 2005 | Unlikely | 6.8 | 0.3% | 2025-12-09 |
| CVE-2024-39723IBM FlashSystem denial of service | IBM · Storage Virtualize | Unlikely | 4.6 | 0.2% | 2024-07-08 |
| CVE-2021-3788An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device. | Motorola · Binatone Hubble Cameras | Unlikely | 6.8 | 0.2% | 2021-11-12 |
| CVE-2022-43557BD BodyGuard™ Pumps – RS-232 Interface Vulnerability | Becton, Dickinson and Company (BD) · BodyGuard™ Pump | Unlikely | 5.3 | 0.2% | 2022-12-05 |
| CVE-2025-1073Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device. | Panasonic · IR Control Hub (IR Blaster) | Unlikely | 7.5 | 0.2% | 2025-04-10 |
| CVE-2023-29063Lack of DMA Access Protections | Becton, Dickinson and Company (BD) · FACSChorus | Unlikely | 2.4 | 0.2% | 2023-11-28 |
| CVE-2025-35998Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R) Platforms within Ring 0: Kernel may allow an escalation of… | Intel(R) Platforms | Unlikely | 7.9 | 0.2% | 2026-02-10 |
| CVE-2025-53699Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, John… | Johnson Controls · iSTAR Ultra | Unlikely | 7.0 | 0.2% | 2026-11-13 |
| CVE-2025-53698Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC‑554: Functionality Byp… | Johnson Controls · iSTAR Ultra | Unlikely | 7.0 | 0.2% | 2026-11-13 |
Data as of 2026-11-14.