CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface
The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.
10 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-1073 — Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with physical access to load unaut
- CVE-2025-41697 — Shell access to UART Console
- CVE-2025-35998 — Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R)
- CVE-2024-39723 — IBM FlashSystem denial of service
- CVE-2025-26409 — Access to Bootloader and Shell Over Serial Interface
- CVE-2024-47944 — Missing Protection Mechanism for Alternate Hardware Interface
Recently published
- CVE-2025-35998 — Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R)
- CVE-2025-41697 — Shell access to UART Console
- CVE-2025-1073 — Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with physical access to load unaut
- CVE-2025-26409 — Access to Bootloader and Shell Over Serial Interface
- CVE-2024-47944 — Missing Protection Mechanism for Alternate Hardware Interface
- CVE-2024-39723 — IBM FlashSystem denial of service