Total
29 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-26409 | 2026-06-17 | N/A | 6.8 MEDIUM | ||
| A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed in recent firmware versions BSP >= 6.4.1. | |||||
| CVE-2025-26408 | 2026-06-17 | N/A | 6.1 MEDIUM | ||
| The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected. | |||||
| CVE-2024-4231 | 2026-06-17 | N/A | 4.6 MEDIUM | ||
| This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to access the sensitive information on the targeted system. | |||||
| CVE-2024-48970 | 2026-06-17 | N/A | 9.3 CRITICAL | ||
| The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. | |||||
| CVE-2024-41692 | 2026-06-17 | N/A | N/A | ||
| This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system. | |||||
| CVE-2024-36319 | 2026-06-17 | N/A | N/A | ||
| Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system. | |||||
| CVE-2023-32666 | 2026-06-17 | N/A | 7.2 HIGH | ||
| On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. | |||||
| CVE-2022-43096 | 1 M5t | 2 Mediatrix 4102s, Mediatrix 4102s Firmware | 2026-06-17 | N/A | 6.8 MEDIUM |
| Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. | |||||
| CVE-2020-9285 | 1 Sonos | 2 One, One Firmware | 2026-06-17 | N/A | 6.8 MEDIUM |
| Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device. | |||||