CVE-2024-48970

CRITICAL Year: 2024
CVSS v3 Score
9.3
Critical
Weakness Type
CWE-1191
View all →

Vulnerability Description

The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.

Related Vulnerabilities

CVE-2023-32666

HIGH
CVSS:7.2(High)

On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enab...

CWE-11912023

CVE-2020-9285

MEDIUM
CVSS:6.8(Medium)

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts...

CWE-11912020

CVE-2022-43096

MEDIUM
CVSS:6.8(Medium)

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.

CWE-11912022

CVE-2025-26409

MEDIUM
CVSS:6.8(Medium)

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt...

CWE-11912025

CVE-2025-26408

MEDIUM
CVSS:6.1(Medium)

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to ex...

CWE-11912025

CVE-2024-4231

MEDIUM
CVSS:4.6(Medium)

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. ...

CWE-11912024