CWE-489: Active Debug Code, page 3
Filter
The product is released with debugging code still enabled or active.
What the weakness is: CWE-489 at MITRE. OWASP Top 10: A02:2025 Security Misconfiguration
Related attack patterns (CAPEC): 2
- CAPEC-121 Exploit Non-Production Interfaces Likelihood: Low · Severity: High
- CAPEC-661 Root/Jailbreak Detection Evasion via Debugging Likelihood: Medium · Severity: Very High
The attack patterns MITRE's CAPEC relates to CWE-489, as MITRE names them. Credits.
Ask an AI about CWE-489
Show the prompt
Explain CWE-489: Active Debug Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/489.html and https://cve.bz/cve/cwe/489?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.8CVE-2020-8320EPSS 0.3%
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
- 8.8CVE-2020-8477EPSS 1.7%
The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead…
- 9.8CVE-2019-10939EPSS 1.1%
A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3), TIM…
- 8.1CVE-2018-5454EPSS 3.4%
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbitrary code during runtime.
- 8.8CVE-2017-5259ExploitEPSS 33%
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.