CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface
The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.
A kind of CWE-420 Unprotected Alternate Channel.
From the CWE List. © The MITRE Corporation.
Newest
- No product listed An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART... 6.8 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +3 more +5 more Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist... 7.0 High
- phoenix contact fl nat 2008, fl nat 2208, fl nat 2304-2gc-2sfp +134 more +136 more Shell access to UART Console 6.8 Medium
- panasonic ir control hub (ir blaster) Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with... 7.5 High
- wattsense bridge Access to Bootloader and Shell Over Serial Interface 6.8 Medium
- rittal gmbh & co. kg iot interface & cmc iii processing unit, rittal gmbh and co.kg iot interface and cmc iii processing unit +1 more Missing Protection Mechanism for Alternate Hardware Interface 6.8 Medium
- ibm storage virtualize IBM FlashSystem denial of service 4.6 Medium
- bd facschorus Lack of DMA Access Protections 2.4 Low
- bd facschorus Lack of USB Whitelisting 5.4 Medium
- becton, dickinson and company (bd) bodyguard™ pump, bd bodyguard 121 twins firmware, bodyguard 323 colorvision firmware +5 more +7 more BD BodyGuard™ Pumps – RS-232 Interface Vulnerability 5.3 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 more An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that... 6.8 Medium