Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.5

FNKvision FNK-GU2 UART Interface Allows Unauthorized Access

CVE-2025-7213 · published 1 year ago
Summary

A critical flaw in the UART Interface of FNKvision's FNK-GU2 device allows unauthorized access to a test interface, potentially allowing an attacker with physical access to the device to exploit it. This issue is specific to the device itself, and attackers would need to have direct access to the hardware to try to exploit it. To protect your device, ensure that it is kept secure and up-to-date, and consider limiting physical access to authorized personnel only.

Original advisory text
A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and...
A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and test interface with improper access control. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
4.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-1191On-Chip Debug and Test Interface With Improper Access Control
Timeline
Published9 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-7213 · NVD
Track software like this
Free during beta