Threats Tagged 'cwe-1299'

CVE-2025-35998 is a high-severity escalation of privilege vulnerability affecting Intel(R) Platforms using Intel(R) Quick Assist Technology. The vulnerability arises from a missing protection mechanism in the hardware interface at the kernel level (Ring 0), potentially allowing a privileged local user to escalate privileges with low complexity and no user interaction. The vulnerability impacts confidentiality and integrity of the affected system. Red Hat has issued a security advisory providing a microcode update to address this issue for Red Hat Enterprise Linux 10.0. No known exploits are reported in the wild.

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g.with the credentials obtained from CVE-2025-41692.

MediumVulnerabilityGermanyFranceItaly+5#cve#cve-2025-41697#cwe-1299

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed in recent firmware versions BSP >= 6.4.1.

MediumVulnerabilityFranceGermanyNetherlands+2#cve#cve-2025-26409#cwe-1299

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.

MediumVulnerabilityGermanyFranceItaly+3#cve#cve-2024-47944#cwe-1299

The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access to the workstation could gain access to system information and potentially exfiltrate data.

MediumVulnerabilityGermanyFranceNetherlands+6#cve#cve-2023-29060#cwe-1299