PT-2025-41718

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A security flaw exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Successful manipulation of this...

EUVD-2020-29824

Malware in sbrugna...

EUVD-2019-7064

Malware in sbrugna...

EUVD-2019-10901

Malware in sbrugna...

EUVD-2020-2718

Malware in sbrugna...

EUVD-2018-12900

Malware in sbrugna...

EUVD-2025-20772

Malicious code in bioql PyPI...

EUVD-2023-38766

Malicious code in bioql PyPI...

PT-2025-32970 · Dinstar · Instar 4K +1

Name of the Vulnerable Software and Affected Versions: INSTAR 2K+ and 4K version 3.11.1 Build 1124 Description: A vulnerability exists in the UART Interface component of the software, leading to improper physical access control. This allows for potential attacks directly on the physical device. T...

CVE-2025-7213

A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and test interface with improper access control. It is possible to launch the attack on the physical...

CVE-2025-7213

A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and test interface with improper access control. It is possible to launch the attack on the physical...

CVE-2025-7213 FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access control

A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and test interface with improper access control. It is possible to launch the attack on the physical...

CVE-2025-7213 FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access control

A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and test interface with improper access control. It is possible to launch the attack on the physical...

CVE-2025-7213

CVE-2025-7213 concerns FNKvision FNK-GU2 devices (firmware versions up to 40.1.7) with an on‑chip debug/test interface exposed via the UART Interface. The root cause is improper access control of the UART interface, enabling unauthorized access to the on‑chip debug/test functionality. Impact is d...

PT-2025-28837 · Fnkvision · Fnk-Gu2

Name of the Vulnerable Software and Affected Versions: FNKvision FNK-GU2 versions up to 40.1.7 Description: A critical vulnerability has been found in the UART Interface component of FNKvision FNK-GU2, allowing for improper access control to the on-chip debug and test interface. The attack can be...

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2021-20168

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default...

CVE-2020-10263

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can i read Wi-Fi SSID or password, ii read the dialogue text files between users and XIAOMI XIAOAI speaker Pro LX06, iii use Text-To-Speech tools pretend...

CVE-2020-8994

An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialogue text files between users and XIAOMI AI speaker, use Text-To-Speech tools pretend XIAOMI...