The product is designed with access restricted to certain information, but it does not sufficiently protect against an unauthorized actor with physical access to these areas.
Volume of CVEs assigned to CWE-1263 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-48973CRITICAL The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see | Nov 14, 2024 | 9.3 | 25 | NO | NO |
CVE-2025-4386MEDIUM Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal. | May 7, 2026 | 6.8 | 24 | NO | NO |
CVE-2025-8762MEDIUM A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper phy | Aug 13, 2025 | 6.8 | 23 | NO | NO |
CVE-2022-32506MEDIUM An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to control the execution of c | May 14, 2024 | 6.4 | 22 | NO | NO |
CVE-2024-28326MEDIUM Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface. | Apr 26, 2024 | 6.8 | 22 | NO | NO |
CVE-2023-38290HIGH Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc (versionCode='9020801', | Apr 22, 2024 | 7.8 | 22 | NO | NO |
CVE-2024-36438HIGH eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks. | Jul 15, 2024 | 7.3 | 21 | NO | NO |
CVE-2022-3728MEDIUM
A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow | Oct 9, 2023 | 6.8 | 21 | NO | NO |
CVE-2022-48182MEDIUM
A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow | Oct 9, 2023 | 6.8 | 20 | NO | NO |
CVE-2024-39512MEDIUM An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get acce | Jul 10, 2024 | 6.6 | 19 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.