CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State
The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- autel maxicharger single, maxicharger single charger firmware +1 more Open Recovery Mode 8.6 High
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]... 6.0 Medium
- No product listed A local attacker who can execute privileged CSR operations (or can induce firmware to do so)... 7.8 High
- cleverdisplay b.v. blueone (cleverdisplay hardware player) CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard 2.4 Low
- sap se web dispatcher and internet communication manager (icm) Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM) 8.2 High
- nvidia dgx gb200, hgx gb300, hgc b300, hgx gb200, hgx gb300, hgc b300 +1 more NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller ... 6.7 Medium
- nvidia hgx, dgx blackwell, hgx, dgx hopper +1 more NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an... 4.2 Medium
- nvidia hgx, dgx blackwell, hgx, dgx hopper +1 more NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an... 4.2 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 more A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco... 6.0 Medium
- nvidia nvdebug, nvdebug tool +1 more The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to... 4.5 Medium
- nvidia hopper hgx 8-gpu NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that... 8.1 High
- siemens sinema remote connect server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The... 6.5 Medium
- dell powerstore, emc powerstore 1000 firmware, emc powerstore 3000 firmware +3 more +5 more Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test... 8.6 High
- blackberry qnx software development platform (sdp), qnx software development platform +1 more In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure... 3.8 Low