CWE-912: Hidden Functionality
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dir-505 D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor 9.3 Critical
- dji crystalsky zs600c DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution 7.0 High
- atsumi electric co., ltd. adx1004, adx1008, adx2016 +7 more +9 more Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi... 8.6 High
- atsumi electric co., ltd. adx1004, adx1008, adx2016 +7 more +9 more Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi... 6.9 Medium
- netis eap930 Netis EAP930 CGI Endpoint debug return200 backdoor 8.9 High
- hitachi industrial equipment systems coding software suite Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process 9.3 Critical
- lite-on technology corporation ff-rfi078i4, ff-rfi079i4 +1 more Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can... 8.7 High
- unknown link factory Link Factory - Backdoor 10.0 Critical
- pulsetto vagus nerve stimulator Pulsetto Vagus Nerve Stimulator Hidden Functionality 7.2 High
- unknown google-maps-easy-pro, supsystic-gallery-pro, tables-generator-pro +2 more Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server 9.8 Critical
- unknown premium seo Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection) 10.0 Critical
- monsterinsights pro, unknown monsterinsights pro +1 more MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise 10.0 Critical
- bos ip camera Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell 9.3 Critical
- vacron vin-ds783e-e6 Vacron｜IP Camera - Hidden Functionality 9.3 Critical
- wago 0765-110x/0100-0000, 0765-120x/0100-0000, 0765-150x/0100-0000 +5 more +7 more Unauthenticated Access to Internal Diagnostic Interface 9.3 Critical
- yarbo firmware, lawn mower firmware, lawn mower pro firmware +2 more Persistent undocumented backdoor access in Yarbo robot 7.2 High
- snap one, llc wattbox 800, wattbox 820 +1 more WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints 9.2 Critical
- deltaww as320t, as320t firmware +1 more Denial of service via the undocumented subfunction in AS320T 9.8 Critical
- electron, red hat build of podman desktop, build of podman desktop - tech preview +2 more Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference 7.8 High
- nec aterm w1200ex-ms firmware, aterm wf1200cr firmware, aterm wg1200cr firmware +43 more +45 more Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to... 6.3 Medium
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker... 8.6 High
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 more Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+ 8.5 High
- wago industrial managed switch 852-1305, industrial managed switch 852-1305-000-001, industrial managed switch 852-1505 +13 more +15 more Hidden CLI Function Allows Root Access 10.0 Critical
- No product listed The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface... 9.1 Critical
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer... 6.4 Medium
- efm iptime a8004t, iptime a8004t firmware +1 more EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor 7.5 High
- brother industries, ltd. multiple mfps Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which... 6.9 Medium
- sharp display solutions, ltd. np-p502hg, np-p502wg, np-p452hg, np-p452wg, np-p502h+, np-p502w+, np-cr5450h, np-cr5450w np-m363w, np-m323w, np-m403x, np-m363x, np-m323x, np-m283x, np-m403wg, np-m363wg, np-m323wg, np-m403xg, np-m363xg, np-m323xg, np-m283xg, np-m403w+, np-m363w+, np-m323w+, np-m403x+, np-m363x+, np-m323x+, np-m283x+, np-m403h, np-m403hg, np-m323hg, np-m403h+, np-m323h+ np-mc370x+, np-mc330x+, np-mc300x+, np-mc330w+, np-mc350xs+, np-mc320xs+, np-mc280xs+, np-mc320ws+, np-cd2100x, np-cd2110x, np-cr2150x, np-cr2160x, np-cr2270x, np-m353ws, np-m333xs, np-m353wsg, np-m303wsg, np-m333xsg, np-m353ws+, np-m303ws+, np-m333xs+, np-m353hs+, np-m323hs+, np-m303hs+ np-p502hl, np-p502wl, np-p502hlg, np-p502wlg, np-p502hl+, np-p502wl+, , np-cr5450hl, np-cr5450wl, np-um35, np-p502hg, np-p502wg, np-p452hg, np-p452wg, np-p502h+, np-p502w+, np-cr5450h, np-cr5450w np-m363w, np-m323w, np-m403x, np-m363x, np-m323x, np-m283x, np-m403wg, np-m363wg, np-m323wg, np-m403xg, np-m363xg, np-m323xg, np-m283xg, np-m403w+, np-m363w+, np-m323w+, np-m403x+, np-m363x+, np-m323x+, np-m283x+, np-m403h, np-m403hg, np-m323hg, np-m403h+, np-m323h+ np-mc370x+, np-mc330x+, np-mc300x+, np-mc330w+, np-mc350xs+, np-mc320xs+, np-mc280xs+, np-mc320ws+, np-cd2100x, np-cd2110x, np-cr2150x, np-cr2160x, np-cr2270x, np-m353ws, np-m333xs, np-m353wsg, np-m303wsg, np-m333xsg, np-m353ws+, np-m303ws+, np-m333xs+, np-m353hs+, np-m323hs+, np-m303hs+ np-p502hl, np-p502wl, np-p502hlg, np-p502wlg, np-p502hl+, np-p502wl+, , np-cr5450hl, np-cr5450wl, np-um352w, np-um352wg, np-um352w+, np-um361x, np-um351w, np-um301xg, np-um361xg, np-um301wg, np-um351wg, np-um301x+, np-um361x+, np-um301w+, np-um351w+ np-p501x, np-p451x, np-p451w, np-p401w, np-p501xg, np-p451xg, np-p451wg, np-p401wg, np-pe501xg, np-p501x+, np-p451x+, np-p451w+, np-p401w+, np-pe501x+ np-m271x, np-m311x, np-m311w, np-m271xg, np-m311xg, np-m361xg, np-m271wg, np-m311wg, np-m271w+, np-m311w+ np-um330x, np-um330w, np-um280xg, np-um330xg, np-um280wg, np-um330wg, np-um280x+, np-um330x+, np-um280w+, np-um330w+, np-m280xs+, np-m320xs+, np-m350xs+, np-m350xsg, np-m300xs+, np-m300xsg, np-m300xs, np-m300ws+, np-m300wsg, np-m300ws, np-m260ws+, np-m260wsg, np-m260xs+, np-m260xsg, np-p420x+, np-p420xg, np-p420x, np-p350x+, np-p350xg, np-p350x, np-p350wa, np-p350wg, np-p350w np-m350x, np-m300x, np-m260x, np-m230x, np-m300w, np-m260w, np-m350xg, np-m300xg, np-m260xg, np-m230xg, np-m300wg, np-m260wg, np-m350x+, np-m300x+, np-m260x+, np-m230x+, np-m300w+, np-m260w+, np-p627ul, np-p627ulg, np-p627ul+, np-p547ul, np-p547ulg, np-p607ul+, np-cg6600ul, np-h6271ul, np-h5471ul, np-p627ulh, np-p547ulh, np-pe455ul, np-pe455ulg, np-pe455wl, np-pe455wlg, np-pe505xlg, np-cg6500xl, np-cg6400ul, np-cg6400wl, np-cb4500xl, np-ca4120x, np-ca4160w, np-ca4160x, np-ca4200u, np-ca4200w, np-ca4202w, np-ca4260x, np-ca4300x, np-ca4355x, np-cd2100u, np-cd2120x, np-cd2300x, np-cr2100x, np-cr2170w, np-cr2170x, np-cr2200u, np-cr2200w, np-cr2280x, np-cr2310x, np-cr2350x, np-mc302xg, np-mc332wg, np-mc342xg, np-mc372x, np-mc372xg, np-mc382w, np-mc382wg, np-mc422xg, np-me342ug, np-me372w, np-me372wg, np-me382u, np-me382ug, np-me402x, np-me402xg, np-p525ul, np-p525ulg, np-p525ul+, np-p525wl, np-p525wlg, np-p525wl+, np-p605ul, np-p605u +1 more +3 more Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors... 9.5 Critical
- mercku m6a Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request... 2.4 Low
- ruijie networks co., ltd. rg-est300 Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It... 8.6 High
- piextract soop-clm PiExtract ｜SOOP-CLM - Hidden Functionality 8.6 High
- i-o data device, inc. wn-7d36qr, wn-7d36qr/ue +1 more Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is... 6.9 Medium
- cgm clininet Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key 8.8 High
- fnkvision y215 cctv camera FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor 5.4 Medium
- proftpd, proftpd project (professional ftp daemon) +1 more ProFTPD 1.3.3c Backdoor Command Execution 9.3 Critical
- totolink n350r, n350r firmware +1 more TOTOLINK N350R Telnet Service formSysTel backdoor 5.3 Medium
- mybb, mybb group forum software +1 more myBB 1.6.4 Backdoor Arbitrary Command Execution 10.0 Critical
- elecom co.,ltd. wrc-be36qs-b, wrc-w701-b +1 more Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's... 6.9 Medium
- netcore technology router firmware Netcore / Netis Routers RCE via UDP Port 53413 Backdoor 9.3 Critical
- conjure position department service quality evaluation system Conjure Position Department Service Quality Evaluation System head.php eval backdoor 5.3 Medium
- simcom sim7600g modem Undocumented Root Shell Access in SIMCom SIM7600G Modem 6.8 Medium
- echarge hardy barth cph2 / cpp2 charging stations Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations 8.1 High
- telemessage archiving backend, tm sgnl, text message archiver +2 more The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM... 1.9 Low
- kentico xperience Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions... 7.2 High
- unitree go1, go1 firmware +1 more Unitree Go1 Robot Dog Backdoor Control Channel 6.6 Medium
- espressif esp32, esp32 firmware +1 more Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). 6.8 Medium
- contec health cms8000 patient monitor The "update" binary in the firmware of the affected product sends attempts to mount to a hard... 7.7 High
- elber cleber/3 broadcast multi-purpose platform, ese dvb-s/s2 satellite receiver, reble610 m/odu xpic ip-asi-sdh +2 more +4 more Elber Communications Equipment Hidden Functionality 8.7 High
- contec health cms8000 patient monitor Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor 7.7 High
- wavlink ac3000, wl-wn533a8 firmware +1 more A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030... 10.0 Critical
- Show olderLoading…