CWE-1263

CVEs per yearBy the year they were published

1. 20233
2. 20246
3. 20253
4. 20262

Newest CVEs

• CVE-2026-80253

  An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader…

  Shizen Connect Inc. · ShizenBox2 (dev-conf)

  High7.0
• CVE-2025-4386

  Medtronic MyCareLink Patient Monitor Hardware Debug Port

  Medtronic · MyCareLink Patient Monitor 24950

  Medium6.8
• CVE-2025-59696

  Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate…

  Product not named

  Low3.2
• CVE-2025-6785

  Tesla Model 3 Physical CAN Bus Injection

  Tesla · Model 3

  Medium4.7
• CVE-2025-8762

  INSTAR 2K+/4K UART improper physical access control

  INSTAR · 2K+

  High7.0
• CVE-2024-48973

  Debug port on Life2000 Ventilator serial interface is enabled by default

  Baxter · Life2000 Ventilation System

  Critical9.3
• CVE-2024-36438

  eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and…

  Product not named

  High7.3
• CVE-2024-39512

  Junos OS Evolved: User is not logged out when the console cable is disconnected

  Juniper Networks · Junos OS Evolved

  High7.0
• CVE-2022-32506

  An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to…

  Product not named

  Medium6.4
• CVE-2024-28326

  Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.

  Product not named

  Medium6.8

Vendors it comes up for most

1. Lenovo3
2. Baxter1
3. INSTAR1
4. Juniper Networks1
5. Medtronic1
6. Shizen Connect Inc.1
7. Tesla1