Internal Asset Exposed to Unsafe Debug Access Level or State
CWE-1244
The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.
How this weakness is prevented
- Architecture and Design Implementation: For security-sensitive assets accessible over debug/test interfaces, only allow trusted agents.
- Architecture and Design: Apply blinding or masking techniques in strategic areas.
- Implementation: Add shielding or tamper-resistant protections to the device, which increases the difficulty and cost for accessing debug/test interfaces.
Latest Internal Asset Exposed to Unsafe Debug Access Level or State vulnerabilities
- 8.2 High severity
SAP Web Dispatcher and Internet Communication…: Internal Asset Exposed to Unsafe Debug Access Level or State
SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production. If enabled, unauthenticated attackers could exploit them to access diagnostics, send crafted requests, or disrupt services. This vulnerability has a high im
- 7.5 High severity
NVDebug tool: Internal Asset Exposed to Unsafe Debug Access Level or State
The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure.
- 8.1 High severity
NVIDIA Hopper HGX 8-GPU: Internal Asset Exposed to Unsafe Debug Access Level or State
NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to cod