The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.
Volume of CVEs assigned to CWE-1191 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-8989HIGH Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical acc | Jul 21, 2026 | 8.6 | 36 | NO | NO |
CVE-2026-8988HIGH Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attac | Jul 21, 2026 | 8.6 | 36 | NO | NO |
CVE-2025-9709HIGH On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacke | Sep 5, 2025 | 8.6 | 28 | NO | NO |
CVE-2024-48970CRITICAL The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debuggin | Nov 14, 2024 | 9.3 | 28 | NO | NO |
CVE-2025-52533HIGH Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity. | Feb 12, 2026 | 8.7 | 27 | NO | NO |
CVE-2024-41692HIGH This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physic | Jul 26, 2024 | 8.6 | 24 | NO | NO |
CVE-2025-65822MEDIUM The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical | Dec 10, 2025 | 6.8 | 23 | NO | NO |
CVE-2022-43096MEDIUM Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. | Nov 17, 2022 | 6.8 | 23 | NO | NO |
CVE-2020-9285MEDIUM Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the mo | Oct 20, 2022 | 6.8 | 23 | NO | NO |
CVE-2025-65821HIGH As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as deta | Dec 10, 2025 | 7.5 | 22 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.