CWE-1191: On-Chip Debug and Test Interface With Improper Access Control
The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- johnson controls neo series mvp2 - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data... 7.2 High
- johnson controls easyio fs32 - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from... 7.2 High
- tp-link systems inc. kasa ec70 v4, kasa ec71 v4 +1 more Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71 5.4 Medium
- dell boot optimized server storage (boss) Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip... 6.8 Medium
- dell boot optimized server storage (boss) Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip... 5.1 Medium
- dell boot optimized server storage (boss) Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip... 7.0 High
- danfoss ic7-automation sp, ic7-hybrid, ic7-marine +2 more Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software 9.3 Critical
- autel maxicharger single, maxicharger single charger firmware +1 more Open Recovery Mode 8.6 High
- autel maxicharger single, maxicharger single charger firmware +1 more Access to Bootloader 8.6 High
- amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +11 more +13 more Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to... 6.3 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 more Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable... 8.7 High
- tozed zlt m30s, gztozed zlt m30s firmware +1 more TOZED ZLT M30s UART on-chip debug and test interface with improper access control 1.0 Low
- cleverdisplay b.v. blueone (cleverdisplay hardware player) CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard 2.4 Low
- meatmeet pro wifi \& bluetooth meat thermometer firmware The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By... 6.8 Medium
- meatmeet pro wifi \& bluetooth meat thermometer firmware As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary... 7.5 High
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Serial Console Enabled 5.2 Medium
- nordic semiconductor nrf52810 NRF52810 Runtime EM Fault Injection APPROTECT Bypass 8.6 High
- fnkvision fnk-gu2 FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access control 5.4 Medium
- flock safety license plate reader, flocksafety license plate reader firmware +1 more Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug... 6.4 Medium
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 more Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper... 6.4 Medium
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 more Open JTAG Debug Port 6.4 Medium
- wattsense bridge Access to Bootloader and Shell Over Serial Interface 6.8 Medium
- wattsense bridge Unprotected JTAG Interface 6.1 Medium
- baxter life2000 ventilation system, life2000 ventilator firmware +1 more Life2000 Ventilator microcontroller lacks memory protection 9.3 Critical
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 more Incorrect Access Control Vulnerability 8.6 High
- digisol dg-gr1321 firmware, router dg-gr1321 +1 more Incorrect Access Control Vulnerability in Digisol Router 6.8 Medium
- intel xeon e-2124g firmware On-chip debug and test interface with improper access control in some 4th Generation Intel(R)... 7.2 High
- m5t mediatrix 4102s firmware Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. 6.8 Medium
- sonos one firmware Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via... 6.8 Medium