CWE-489: Active Debug Code
The product is released with debugging code still enabled or active.
Also known as Leftover debug code.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- netis wf-2404, netis-systems netis wf-2404 firmware +1 moreNetis WF-2404 UART hardware allows activation of test or debug logic at runtime7.0 High
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +58 more +60 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC...7.0 High
- four-faith f3x36, f3x36 firmware +1 moreFour-Faith F3x36 bapply.cgi Auth Bypass9.8 Critical
- four-faith f3x36, f3x36 firmware +1 moreFour-Faith F3x36 Hidden Debug Credentials9.8 Critical
- sharp corporation home 5g hr02, pocketwifi 809sh, speed wi-fi next w07 +3 more +5 moreMultiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be...9.8 Critical
- cisco redundancy configuration managerCisco Redundancy Configuration Manager Debug Remote Code Execution Vulnerability8.1 High
- softbank corp. mesh wi-fi router rp562bActive debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and...4.6 Medium
- techno support company smart-tab android app, android app smart tab +1 moreSmart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability...6.8 Medium
- lenovo 10w (type 82st, 82su) laptop (lenovo) bios, 10w firmware, l390 (type 20nr, 20ns) laptops (thinkpad) bios +2 more +4 moreA potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could...6.8 Medium
- google androidIn TBD of TBD, there is a possible LCS signing enforcement missing due to test/debugging code...7.8 High
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +43 more +45 moreFutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an...8.8 High
- levelone wbr-6013, level1 wbr-6013 firmware, level one wbr6013 +2 moreLeftover debug code exists in the boa formSysCmd functionality of LevelOne WBR-6013...7.2 High
- artifex ghostscript, afpl ghostscript +1 moreArtifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal...7.5 High
- tp-link er7206, er7206 omada gigabit vpn router, er7206 firmware +2 moreA leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link...7.2 High
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorize…9.8 Critical
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Active Debug Code9.8 Critical
- roamwifi r10Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is...8.8 High
- planex communications inc. mzk-mf300n, planex mzk-mf300hp2 firmware, mzk-mf300n firmware +1 more +3 moreActive debug code vulnerability exists in MZK-MF300N all firmware versions. If a logged-in user...6.8 Medium
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreActive Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3,...9.8 Critical
- johnson controls quantum hd unity acuair, quantum hd unity compressor, quantum hd unity condenser/vessel +9 more +11 moreQuantum HD Unity10.0 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of...9.8 Critical
- moxa iologik 4000 series, iologik e4200 firmware +1 moreioLogik 4000 Series: Existence of an Unauthorized Service5.3 Medium
- sensormatic electronics, a subsidiary of johnson controls, inc. illustra pro gen 4 dome, johnsoncontrols illustra pro gen 4 dome firmware, illustra pro gen 4 ptz firmware +1 more +3 moreDebug feature in Sensormatic Electronics Illustra Dome and PTZ cameras8.3 High
- mitsubishi electric corporation melsec ws series ws0-geth00200, mitsubishielectric melsec ws0-geth00200 firmware +1 moreAuthentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module7.5 High
- samsung android, samsung mobile devices +1 moreActive Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows...6.1 Medium
- qnap qts, quts hero, qutscloud +8 more +10 moreQTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)2.7 Low
- tuition management system project management systemSQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email...9.8 Critical
- mitsubishi electric corporation melfa f series controller cr750-02vd-1 of rv-2f-d, melfa f series controller cr750-02vd-1 of rv-2fb-d, melfa f series controller cr750-02vd-1 of rv-2fl-d +492 more +494 moreAuthentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series7.5 High
- siretta quartz-gold, quartz-gold firmware +1 moreA leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ...7.2 High
- omron corporation cp1l-el20dr-d, omron cp1l-el20dr-d firmware +1 moreActive debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is...9.8 Critical
- grafana synthetic-monitoring-agent, synthetic monitoring agent +1 moreGrafana's default installation of `synthetic-monitoring-agent` exposes sensitive information7.2 High
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console infct functionality of InHand Networks...4.3 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of...6.5 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console nvram functionality of InHand Networks...4.9 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console support functionality of InHand...6.5 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA leftover debug code vulnerability exists in the console verify functionality of InHand Networks...6.5 Medium
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreA denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc....8.6 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreAn OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode...8.1 High
- contec health cms8000 contec icu ccu vital signs patient monitor, contechealth cms8000 firmware +1 moreContec Health CMS80003.0 Low
- omron nj-pa3001 firmware, nj-pd3001 firmware, nj101-1000 firmware +50 more +52 moreAuthentication bypass by capture-replay vulnerability exists in Machine automation controller NX7...7.5 High
- robustel r1510, r1510 firmware +1 moreA command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0....9.1 Critical
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA command execution vulnerability exists in the console inhand functionality of InHand Networks...9.9 Critical
- lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +103 more +105 moreA potential vulnerability by a driver used during manufacturing process on some consumer Lenovo...6.7 Medium
- lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +71 more +73 moreA potential vulnerability by a driver used during older manufacturing processes on some consumer...6.7 Medium
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 moreB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus7.2 High
- reolink rlc-410w firmwareA firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0...10.0 Critical
- bosch bvms, vrm, video management system +4 more +6 morePossible Access to Debug Functions in Bosch VRM / BVMS6.5 Medium
- naver comic viewerAn exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote...8.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Active Debug Code Vulnerability6.1 Medium
- Show moreLoading…