Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1242: Inclusion of Undocumented Features or Chicken Bits

Base Incomplete

The device includes chicken bits or undocumented features that can create entry points for unauthorized actors.

More detail

A common design practice is to use undocumented bits on a device that can be used to disable certain functional security features. These bits are commonly referred to as "chicken bits". They can facilitate quick identification and isolation of faulty components, features that negatively affect performance, or features that do not provide the required controllability for debug and test. Another way to achieve this is through implementation of undocumented features.

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation

    The implementation of chicken bits in a released product is highly discouraged. If implemented at all, ensure that they are disabled in production devices. All interfaces to a device should be documented.

Source: MITRE CWE-1242

All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • High 7.7
    CVE-2026-82928

    Undocumented access path in mH-DEVELOPER

    mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorized_keys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can …

    F&F Filipowski mH-DEVELOPER
  • High 8.8
    CVE-2023-3634

    Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

    In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.

    Festo MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L5-MQ1-AGD MSE6-C2M-5000-FB44-D-RG-BAR-AMI-AGD MSE6-E2M-5000-FB13-AGD
  • High 8.1
    CVE-2025-41756

    Arbitrary Write with ubr-editfile

    A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system.

    MBS UBR-02 UBR-01 Mk II UBR-LON
  • Medium 6.5
    CVE-2025-41754

    Arbitrary Read with ubr-editfile

    A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system.

    MBS UBR-01 Mk II UBR-LON UBR-02
  • High 7.5
    CVE-2026-24714

    Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate teln…

    NETGEAR NETGEAR products Network devices
  • High 8.7
    CVE-2021-47796

    Denver SHO-110 IP Camera Unauthenticated Snapshot Access

    Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attack…

    Denver SHO-110
  • High 8.7
    CVE-2021-4469

    Denver SHO-110 IP Camera Unauthenticated Snapshot Access

    Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attack…

    Denver SHO-110
  • Critical 10.0
    CVE-2025-12176

    Undocumented Administrative Accounts

    Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC2 BLU-IC4
  • Critical 9.3
    CVE-2017-20204

    DBLTek GoIP Telnet Admin Interface Undocumented Backdoor

    DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumented user via a proprietary challenge–response scheme which is fundamentally f…

    DBL Technology (DBLTek) GoIP
  • Critical 9.8
    CVE-2025-55050

    CWE-1242: Inclusion of Undocumented Features

    Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
  • Medium 6.9
    CVE-2025-52548

    Enabling SSH and Shellinabox on the vulnerable machine

    E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize thi…

    Copeland LP E3 Supervisory Control
  • High 7.5
    CVE-2025-22450

    Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may d…

    I-O DATA DEVICE UD-LT2
  • High 7.2
    CVE-2024-54457

    Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE10…

    FXC AE1021PE AE1021
  • High 7.5
    CVE-2024-52564

    Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX …

    I-O DATA DEVICE UD-LT1 UD-LT1/EX
  • Medium 6.5
    CVE-2024-7011

    Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL,…

    Sharp Display Solutions NP-CA4200W NP-MC302XG NP-P525UL
  • Medium 6.5
    CVE-2024-2103

    Inclusion of Undocumented Features

    Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G G…

    Schweitzer Engineering Laboratories SEL-710-5 Motor Protection Relay SEL-751 Feeder Protection Relay SEL-787Z High-Impedance Differential Relay