Skip to main content

CWE archive

CWE-1326 CVEs

Programmatic archive

9 CVEs tagged with CWE-13260 Critical, 6 High, 2 Medium, 1 Low, 0 Unrated.

CVE-2025-34503

Published Oct 24, 2025

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to r…

CVSS 7.0 · High
evidence mentions
2
Buzz score
21.0

CVE-2025-34502

Published Oct 24, 2025

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with p…

CVSS 7.0 · High
evidence mentions
2
Buzz score
21.0

CVE-2025-31929

Published May 13, 2025

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC…

CVSS 4.1 · Medium
evidence mentions
1
Buzz score
11.9

CVE-2025-2762

Published Apr 23, 2025

CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of…

CVSS 7.8 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2024-8357

Published Nov 22, 2024

Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges…

CVSS 7.8 · High
evidence mentions
2
Buzz score
17.5
Vendor/product tagsBeta · best-effort

CVE-2024-30111

Published Jun 28, 2024

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious…

CVSS 3.3 · Low
Vendor/product tagsBeta · best-effort
Showing 1-9 of 9 CVEsPage 1 of 1