CVE-2026-78862

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

EUVD-2026-92784

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2026-78862: Missing Protection Mechanism for Alternate Hardware Interface

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2026-78862

An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...

CVE-2026-78862

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

PT-2026-106222

Name of the Vulnerable Software and Affected Versions Mercusys AC12 V2 affected versions not specified Description An issue exists in the firmware of the Mercusys AC12 router due to the lack of protection mechanisms for the alternative hardware interface. This allows a local attacker to execute...

CVE-2024-33374: Improper Privilege Management

Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...

CVE-2024-33374

The LB-LINK BL-W1210M v2.0 router contains an incorrect access control vulnerability in its UART/Serial interface . This flaw allows an attacker to bypass authentication and gain direct access to the root terminal , leading to unauthorized system access. As a temporary workaround, it is recommend...

CVE-2024-33374

Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2023-46033: Improper Access Control

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2019-20348

OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...

CVE-2019-20348

OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...

CVE-2019-20348: Improper Neutralization of Special Elements used in an OS Command

OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks...

PT-2020-10392

Name of the Vulnerable Software and Affected Versions OKER G232V1 version 1.03.02.20161129 Description The issue allows attackers with physical access to execute arbitrary commands with root privileges by interrupting the boot sequence on a UART serial interface, due to a lack of proper access...

CVE-2018-20342

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...

PT-2018-15318

Name of the Vulnerable Software and Affected Versions Floureon IP Camera SP012 affected versions not specified Description The issue concerns the lack of proper access control on the root terminal provided by the UART serial interface. This allows attackers with physical access to the device to...

CVE-2018-20342: Improper Authentication

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges...