CWE-912

Hidden Functionality

Parent: CWE-684 - Incorrect Provision of Specified Functionality

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

69 vulnerabilities with CWE-912
CVE-2026-1741 MEDIUM
EFM ipTIME A8004T 14.18.2 - RCE
CVSS 6.6
CVE-2025-55704 MEDIUM
Brother MFP - Info Disclosure
CVSS 5.3
CVE-2025-11544
Sharp Display Solutions - Code Injection
CVE-2025-62773 LOW
Mercku M6a <2.1.0 - RCE
CVSS 2.4
CVE-2025-58778 HIGH
Ruijie Networks RG-EST300 - Info Disclosure/Privilege Escalation
CVSS 7.2
CVE-2025-11673 HIGH
SOOP-CLM - RCE
CVSS 7.2
CVE-2025-55075 MEDIUM
WN-7D36QR - Privilege Escalation
CVSS 4.9
CVE-2025-30064
Unknown - Info Disclosure
CVE-2025-9382 MEDIUM
FNKvision Y215 CCTV Camera - Backdoor
CVSS 6.4
CVE-2010-20103 CRITICAL
ProFTPD <1.3.3c - RCE
CVSS 9.8
CVE-2025-8938 MEDIUM
TOTOLINK N350R 1.2.3-B20130826 - Backdoor
CVSS 6.3
CVE-2011-10018 CRITICAL
myBB 1.6.4 - Code Injection
CVSS 9.8
CVE-2025-46267 MEDIUM
WRC-BE36QS-B/WRC-W701-B - Info Disclosure
CVSS 4.9
CVE-2025-34117
Netcore/Netis <Aug 2014 - RCE
CVE-2025-6839 MEDIUM
Conjure Position Department Service Quality Evaluation System <1.0....
CVSS 6.3
CVE-2025-26412 MEDIUM
SIMCom SIM7600G - RCE
CVSS 6.8
CVE-2025-48416 HIGH
OpenSSH - Auth Bypass
CVSS 8.1
CVE-2025-47729 LOWKEV
TeleMessage <2025-05-05 - Info Disclosure
CVSS 1.9
CVE-2025-32370 HIGH
Kentico Xperience < 13.0.178 - XSS
CVSS 7.2
CVE-2025-2894 MEDIUM
Go1 - RCE
CVSS 6.6
CVE-2025-27840 MEDIUM
Espressif ESP32 - Info Disclosure
CVSS 6.8
CVE-2025-1204
Firmware - Code Injection
CVE-2025-0675 HIGH
Elber Products - Info Disclosure
CVSS 7.5
CVE-2025-0626 HIGH
Firmware - SSRF
CVSS 7.5
CVE-2024-39754 CRITICAL
Wavlink AC3000 M33A8.V5030.210505 - RCE
CVSS 10.0
Details
Vulnerabilities 69