Skip to content
OpenAdvisories

Weakness (CWE)

CWE-912: Hidden Functionality

Class Incomplete

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

How to prevent it (1 mitigation)

  1. Installation

    Always verify the integrity of the product that is being installed.

Source: MITRE CWE-912

All Critical High Medium Low Exploited only Public exploit

100 results · Feed

  • Medium 6.8
    CVE-2025-26412

    Undocumented Root Shell Access in SIMCom SIM7600G Modem

    The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the …

    SIMCom SIM7600G Modem
  • High 8.1
    CVE-2025-48416

    Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations

    An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in vi…

    eCharge Hardy Barth cPH2 / cPP2 charging stations
  • Low 1.9
    CVE-2025-47729 Exploited

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signa…

    TeleMessage archiving backend
    KEV May 12, 2025
  • High 7.2
    CVE-2025-32370 Public exploit

    Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…

    Kentico Xperience
  • Medium 6.6
    CVE-2025-2894

    Unitree Go1 Robot Dog Backdoor Control Channel

    The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the af…

    Unitree Go1
  • Medium 6.8
    CVE-2025-27840 Public exploit

    Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

    espressif ESP32
  • High 7.7
    CVE-2025-1204

    The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP addres…

    Contec Health CMS8000 Patient Monitor
  • High 7.5
    CVE-2025-0675

    Elber Communications Equipment Hidden Functionality

    Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.

    Elber Cleber/3 Broadcast Multi-Purpose Platform ESE DVB-S/S2 Satellite Receiver Signum DVB-S/S2 IRD
  • High 7.5
    CVE-2025-0626

    Hidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor

    The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The func…

    Contec Health CMS8000 Patient Monitor
  • Critical 10.0
    CVE-2024-39754

    A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially craft…

    WAVLINK Wavlink AC3000
  • High 7.2
    CVE-2024-13062

    An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary com…

    ASUS Router
  • Critical 9.0
    CVE-2024-10773

    SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks

    The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device.

    SICK SICK InspectorP62x SICK InspectorP61x TiM3xx
  • High 8.8
    CVE-2024-47001

    Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remo…

    TAKENAKA ENGINEERING NVR16T-A HDVR-800 AHD04T-A
  • Critical 9.8
    CVE-2024-45697

    D-Link WiFi router - Hidden Functionality

    Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.

    D-Link DIR-X4860 A1 Network devices
  • High 8.8
    CVE-2024-45696

    D-Link WiFi router - Hidden Functionality

    Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method…

    D-Link DIR-X4860 A1 COVR-X1870 Network devices
  • Medium 4.3
    CVE-2024-37994

    A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC …

    Siemens SIMATIC RF188C SIMATIC RF185C SIMATIC RF186C ICS / OT
  • Medium 6.5
    CVE-2024-37990

    A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC …

    Siemens SIMATIC RF188C SIMATIC RF185C SIMATIC RF186C ICS / OT
  • Critical 9.8
    CVE-2024-20439 Exploited Scanner template EPSS 97%

    A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an …

    Cisco Cisco Smart License Utility Network devices
    KEV Mar 31, 2025
  • High 7.5
    CVE-2024-5633 Public exploit

    Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attac…

    Zamel Longse Technology LBH30FE200W ZMB-01/C
  • High 8.8
    CVE-2024-6045

    D-Link router - Hidden Backdoor

    Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator …

    D-Link G416 M60 M32 Network devices
  • Critical 9.8
    CVE-2024-5514

    MinMax CMS - Hidden Functionality

    MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and lo…

    MinMax Digital Technology MinMax CMS
  • Low 3.3
    CVE-2024-33583

    A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC…

    Siemens SIMATIC RTLS Locating Manager ICS / OT
  • Critical 9.1
    CVE-2024-3016

    NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-docum…

    NEC Platforms ITK-6DGS-1A(BK) TEL ITK-6DGS-1(BK) TEL ITK-12DG-1P(BK)TEL
  • Critical 9.8
    CVE-2024-28011

    Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG12…

    NEC WG1200HP WR8600N WR7850S
  • High 7.5
    CVE-2024-22044

    A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affec…

    Siemens SENTRON 3KC ATC6 Expansion Module Ethernet ICS / OT
  • Medium 6.8
    CVE-2023-42134

    PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partiti…

    PAX Technology POS terminals
  • Medium 6.2
    CVE-2023-4467

    Poly Trio 8800 Test Automation Mode backdoor

    A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Affected by this issue is some unknown functionality of the component Test Automation Mode. The manipulation leads to backdoor. It is possible to launch the attack on the physi…

    Poly Trio 8800
  • Low 2.7
    CVE-2023-6614

    Typecho Page manage-pages.php backdoor

    A vulnerability classified as problematic was found in Typecho 1.2.1. Affected by this vulnerability is an unknown functionality of the file /admin/manage-pages.php of the component Page Handler. The manipulation leads to backdoor. The attack can be launched …

  • High 8.8
    CVE-2023-40158

    Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary O…

    CBC DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series NR-4F, NR-8F, NR-16F series NR4H, NR8H, NR16H series
  • High 8.3
    CVE-2023-25183

    In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that co…

    Snap One OVRC cloud
  • High 7.2
    CVE-2022-38452

    A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8…

    NETGEAR Orbi Router RBR750 Network devices
  • High 7.2
    CVE-2022-36429

    A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS…

    NETGEAR Orbi Satellite RBS750 Network devices
  • Medium 5.3
    CVE-2021-36403

    Moodle has a Hidden Functionality vulnerability

    In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2023-24108

    MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request p…

  • Critical 9.1
    CVE-2022-3843

    WAGO: Exposure of configuration interface in unmanaged switches

    In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.

    WAGO Unmanaged Switch 852-111/000-001 ICS / OT
  • Critical 9.8
    CVE-2022-47767

    A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to …

  • Medium 6.5
    CVE-2023-22316

    Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a netwo…

    PIXELA PIX-RT100
  • Critical 9.8
    CVE-2022-46996

    vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via…

  • Critical 9.8
    CVE-2022-46997

    Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the re…

  • Low —
    GHSA-8jh9-wqpf-q52c

    sweetalert2 v8.19.1 and above contains hidden functionality

    `sweetalert2` versions 8.19.1 and up until 9.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versi…

    sweetalert2 npm