CWE-912: Hidden Functionality
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- asus routerAn unintended entry point vulnerability has been identified in certain router models, which may...7.2 High
- sick tim3xx, sick ag inspectorp61x, inspectorp62x +2 more +4 moreSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks9.0 Critical
- takenaka engineering co., ltd. ahd04t-a, ahd08t-a, ahd16t-a +15 more +17 moreHidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING...8.8 High
- d-link dir-x4860 a1, dlink dir-4860 a1, dir-x4860 firmware +2 moreD-Link WiFi router - Hidden Functionality9.8 Critical
- d-link covr-x1870, dir-x4860 a1, dlink covr-x1870 firmware +1 more +3 moreD-Link WiFi router - Hidden Functionality8.8 High
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...5.3 Medium
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +51 more +53 moreA vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All...7.0 High
- cisco smart licensing utility, smart license utility +1 moreA vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker...9.8 Critical
- longse technology lbh30fe200w, zamel zmb-01, zmb-01/c +2 moreLongse model LBH30FE200W cameras, as well as products based on this device, provide an...7.5 High
- d-link e15, e30, g403 +15 more +17 moreD-Link router - Hidden Backdoor8.8 High
- minmax, minmax digital technology cms +1 moreMinMax CMS - Hidden Functionality9.8 Critical
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...4.8 Medium
- nec platforms, ltd itk-12d-1(bk)tel, itk-12d-1p(bk)tel, itk-12dg-1p(bk)tel +41 more +43 moreNEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker...9.1 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreHidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...9.8 Critical
- siemens sentron 3kc atc6 expansion module ethernet, sentron 3kc act6 +1 moreA vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)...7.5 High
- paxtechnology paydroid, pax technology pos terminals +1 morePAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can...6.8 Medium
- poly trio 8800, trio 8800 firmware +1 morePoly Trio 8800 Test Automation Mode backdoor6.2 Medium
- typechoTypecho Page manage-pages.php backdoor2.7 Low
- cbc dr-16f, dr-16h, dr-4f +44 more +46 moreHidden functionality vulnerability in the CBC products allows a remote authenticated attacker to...8.8 High
- snap one ovrc cloud, snapone orvc +1 moreIn Snap One OvrC Pro versions prior to 7.2, when logged into the...8.3 High
- netgear orbi router rbr750, rbs750 firmware +1 moreA command execution vulnerability exists in the hidden telnet service functionality of Netgear...7.2 High
- netgear orbi satellite rbs750, rbs750 firmware +1 moreA command execution vulnerability exists in the ubus backend communications functionality of...7.2 High
- moodleMoodle has a Hidden Functionality vulnerability5.3 Medium
- zetacomponents mvctoolsMvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution...9.8 Critical
- wago 852-111\/000-001 firmware, unmanaged switch 852-111/000-001 +1 moreWAGO: Exposure of configuration interface in unmanaged switches9.1 Critical
- solar-log 1000 firmware, 1000 pm\+ firmware, 1200 firmware +6 more +8 moreA backdoor in Solar-Log Gateway products allows remote access via web panel gaining super...9.8 Critical
- pixela corporation pix-rt100, pixela pix-rt100 firmware +1 moreHidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1...6.5 Medium
- passhunt project passhuntPasshunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code...9.8 Critical
- vsphere selfuse project selfusevSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code...9.8 Critical
sweetalert2npmsweetalert2 v8.19.1 and above contains hidden functionalityNo scoresweetalert2npmsweetalert2 v9.17.4 and above contains hidden functionalityNo scoresweetalert2npmsweetalert2 v10.16.10 and above contains hidden functionalityNo scoresweetalert2npmsweetalert2 v11.4.9 and above contains hidden functionalityNo score- oring iap-420(+), oringnet iap-420\+ firmware, iap-420 firmware +2 moreORing net IAP-420(+) Hidden Functionality9.8 Critical
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more2.2.3 HIDDEN FUNCTIONALITY CWE-9126.8 Medium
- jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server KNX Group Address backdoor5.3 Medium
- jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server SSH Server backdoor5.3 Medium
- jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server backdoor5.5 Medium
node-ipcnpmHidden functionality in node-ipcNo score- access-keys wp popup banners, accesspress themes accessbuddy, basic +141 more +143 moreBackdoored Plugins & Themes from AccessPress Themes9.8 Critical
- myscada mypromySCADA myPRO9.8 Critical
- ua-parser-js project ua-parser-jsua-parser-js Crypto Mining backdoor5.0 Medium
- cosori cs158-af firmwareA unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8...8.1 High
- samsung android, mobile devices, samsung mobile devices +2 moreA vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF...6.1 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Hidden Commands Vulnerability5.3 Medium
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetwave 2212g firmware +29 more +31 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products9.8 Critical
- redlion n-tron 702-w firmware, n-tron 702m12-w firmware +1 moreThe affected product is vulnerable due to an undocumented interface found on the device, which...9.8 Critical
- freemedsoftware openclinic gaOpenClinic GA9.4 Critical
- hangzhou xiongmai technology co., ltd xmeye p2p cloud serverAll versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an...6.5 Medium