CWE-1242

16 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 3High 9Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-82928
Undocumented access path in mH-DEVELOPER
F&F Filipowski · mH-DEVELOPER
High7.7
CVE-2023-3634
Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions
Festo · MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD
High8.8
CVE-2025-41756
Arbitrary Write with ubr-editfile
MBS · UBR-01 Mk II
High8.1
CVE-2025-41754
Arbitrary Read with ubr-editfile
MBS · UBR-01 Mk II
Medium6.5
CVE-2026-24714
Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box.
NETGEAR · NETGEAR products
High8.7
CVE-2021-47796
Denver SHO-110 IP Camera Unauthenticated Snapshot Access
Denver · SHO-110
High8.7
CVE-2021-4469
Denver SHO-110 IP Camera Unauthenticated Snapshot Access
Denver · SHO-110
High8.7
CVE-2025-12176
Undocumented Administrative Accounts
Azure Access Technology · BLU-IC2
Critical10.0
CVE-2017-20204
DBLTek GoIP Telnet Admin Interface Undocumented Backdoor
DBL Technology (DBLTek) · GoIP
Critical9.3
CVE-2025-55050
CWE-1242: Inclusion of Undocumented Features
Baicells · NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
Critical9.8