Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:40 p.m.7 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.4AI score0.00023EPSS
Exploits0References1
NVD
NVD
added 2026/05/15 3:16 a.m.10 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS0.00023EPSS
Exploits0References2
CVE
CVE
added 2026/05/15 2:9 a.m.10 views

CVE-2025-0040

CVE-2025-0040 describes an improper access control between JTAG and AXI that could let an attacker with physical access read or overwrite cross-chip debug (XCD) registers, potentially affecting data integrity and confidentiality. The vulnerability affects the AMD ecosystem context referenced in A...

5.3CVSS5.8AI score0.00023EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/15 2:9 a.m.6 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.8AI score0.00023EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/15 2:9 a.m.6 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.8AI score0.00023EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/15 2:9 a.m.10 views

EUVD-2025-209873

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.8AI score0.00023EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/15 12:0 a.m.11 views

PT-2026-41245

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.8AI score0.00023EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/11 12:3 a.m.3 views

CVE-2025-65822

The ESP32 system on a chip SoC that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be...

6.8CVSS6.8AI score0.00031EPSS
Exploits0References1
CVE
CVE
added 2025/12/02 12:0 a.m.7 views

CVE-2025-59693

The CVE affects Entrust nShield hardware: Chassis Management Board in nShield Connect XC, nShield 5c, and nShield HSMi up to firmware versions 13.6.11 and 13.7. Root cause is physical access bypass of tamper labels to reach the JTAG connector, enabling a proximate attacker to gain debug access an...

9.8CVSS6.6AI score0.00094EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/12/02 12:0 a.m.7 views

CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing th...

0.00094EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:0 a.m.1 views

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows intruders to implant or modify the firmware.

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to access control deficiencies. Exploiting this vulnerability can allow attackers to implant or modify the firmware...

6.4CVSS5.5AI score0.00083EPSS
Exploits0References3
CNVD
CNVD
added 2025/07/04 12:0 a.m.0 views

Code Execution Vulnerabilities in Multiple Advantech Products

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A code execution vulnerability exists in multiple Advantech products, which can be exploited by attackers to inject or modify firmware via the JTAG interface...

6.4CVSS6.1AI score0.00083EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.1 views

The vulnerability of the JTAG interface implementation in microprogramming software for Intel processors allows a intruder to gain unauthorized access to protected information.

The vulnerability of the JTAG interface implementation in Intel microprogramming systems is related to deficiencies in the system’s controlled boundaries. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

4.9CVSS5.7AI score0.00054EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder