CVE-2026-80253
An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without authentication.
Scoring
- Severity
- HIGH
- CVSS base score
- 7
- CVSS vector
- CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.33%
- CWE
- CWE-1263
- Published
- 2026-09-03
- Last modified
- 2026-09-03
Affected products
- Shizen Connect Inc. ShizenBox2 (dev-conf)
Weakness type
Related vulnerabilities
- CVE-2025-4386 — Medtronic MyCareLink Patient Monitor Hardware Debug Port
- CVE-2025-6785 — Tesla Model 3 Physical CAN Bus Injection
- CVE-2025-8762 — INSTAR 2K+/4K UART improper physical access control
- CVE-2024-48973 — Debug port on Life2000 Ventilator serial interface is enabled by default
- CVE-2024-39512 — Junos OS Evolved: User is not logged out when the console cable is disconnected
- CVE-2022-48183
- CVE-2022-48182
- CVE-2022-3728