Weakness (CWE)
CWE-912: Hidden Functionality
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.
How to prevent it (1 mitigation)
-
Installation
Always verify the integrity of the product that is being installed.
Source: MITRE CWE-912
28 results · Clear filters · Feed
-
High 7.0
DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution
Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by send…
-
High 7.2
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A us…
-
High 8.0
Netis EAP930 CGI Endpoint debug return200 backdoor
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be ini…
-
High 8.8
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and acc…
-
High 8.1
Pulsetto Vagus Nerve Stimulator Hidden Functionality
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet…
-
High 7.2
Persistent undocumented backdoor access in Yarbo robot
A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factor…
-
High 7.8
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to…
-
High 7.2
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the p…
-
High 8.5
Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnet…
-
High 7.2
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in th…
-
High 7.2
PiExtract ｜SOOP-CLM - Hidden Functionality
SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server.
-
High 8.8
Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUs…
-
High 8.1
Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in vi…
-
High 7.2CVE-2025-32370 Public exploit
Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…
-
High 7.7
The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP addres…
-
High 7.5
Elber Communications Equipment Hidden Functionality
Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.
-
High 7.5
Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor
The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The func…
-
High 7.2
An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary com…
-
High 8.8
Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remo…
-
High 8.8
D-Link WiFi router - Hidden Functionality
Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method…
-
High 7.5CVE-2024-5633 Public exploit
Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attac…
-
High 8.8
D-Link router - Hidden Backdoor
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator …
-
High 7.5
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affec…
-
High 8.8
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary O…
-
High 8.3
In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that co…
-
High 7.2
A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8…
-
High 7.2
A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS…
-
High 8.1
A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-A…