Concierge

Concierge Toolkit: Physical Access Control Identification and Exploitation The Concierge Toolkit is collection of various scripts and resources to aid the in identification and exploitation of physical access control and monitoring systems. Concierge currently contains tests and/or exploits for t...

CVE-2026-80253

CVE-2026-80253 is an improper physical access control flaw in ShizenBox2 (dev-conf) . An attacker with physical access to the device can execute bootloader commands without authentication , leading to high impact on confidentiality, integrity, and availability. The vulnerability is rated 6.8 (Med...

CVE-2026-80253

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

PT-2026-84971

An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...

Multiple vulnerabilities in ShizenBox2

Overview ShizenBox2 provided by Shizen Connect Inc. contains multiple vulnerabilities listed below. Improper physical access control CWE-1263 - CVE-2026-80253 Authorization bypass through user-controlled key CWE-639 - CVE-2026-80254 CVE-2026-80253 Naohide Waguri of PwC Consulting LLC reported thi...

CVE-2025-59696: Improper Physical Access Control

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board...

EUVD-2021-16049

Malware in sbrugna...

EUVD-2022-29912

Malicious code in bioql PyPI...

CVE-2025-8762: Improper Physical Access Control

A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to t...

Schneider Electric Wiser Home Automation

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Passwords should include upper case, lower case, number and special characters, a length of 20 characters is ideal. A default Admin password must be changed immediately when first received...

CVE-2022-25213

Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical access to obtain a root shell via an unprotected UART port on the device. The same port exposes an unauthenticated Das U-Boot BIOS shell...

CVE-2021-29414

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

Schneider Electric Modicon

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

Making sure your door access control system is secure: Top 5 things to check

Your door access control system aka a physical access control system or PACS, also referred to as RFID cards or ‘swipe’ cards often have a poor reputation for being vulnerable to cloning attacks. Here’s the thing: it’s generally possible to configure your system to be very resistant to card...

CVE-2024-39512

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a...

CVE-2024-39512 Junos OS Evolved: User is not logged out when the console cable is disconnected

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a...

CVE-2024-39512

The CVE-2024-39512 issue affects Junos OS Evolved consoles. Root cause: improper physical access control where disconnecting the console cable leaves the session active, enabling a local attacker with physical access to resume a prior session and potentially gain administrative privileges. Affect...

CVE-2024-39512: Improper Physical Access Control

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a...

Juniper Junos OS Vulnerability (JSA82977)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82977 advisory. - An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to...

CVE-2024-28326: Improper Physical Access Control

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...