Cyber Resilience

CVE-2024-47944

Published
15 October 2024
Modified
15 April 2026
CVSS Score v3.1 6.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0040 33th percentile
Risk Priority 50 floored blend · peak EPSS

Summary

CVE-2024-47944 is a medium-severity Missing Protection Mechanism for Alternate Hardware Interface (CWE-1299) vulnerability in Sec Consult (inferred from references). Its CVSS base score is 6.8 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Abuse Elevation Control Mechanism (T1548); ranked at the 33th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and SC-7 (Boundary Protection) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.

CWE(s)
CWE-1299

Related Threats

MITRE ATT&CK Enterprise Techniques

T1548 Abuse Elevation Control Mechanism Privilege Escalation
Adversaries may circumvent mechanisms designed to control privilege elevation to gain higher-level permissions.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2025-1073Shared CWE-1299
CVE-2025-41697Shared CWE-1299
CVE-2023-29063Shared CWE-1299
CVE-2023-29060Shared CWE-1299
CVE-2025-35998Shared CWE-1299
CVE-2025-26409Shared CWE-1299
CVE-2024-39723Shared CWE-1299

Affected Assets

Sec Consult
—
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

—

Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V13.3.3
  • V13.3.2

Mitigating Controls (NIST 800-53 r5) AI

AC-3 Access Enforcement good match

AC-3 requires access enforcement on every logical path to protected assets, directly stopping bypass via unguarded alternate hardware interfaces.

SC-7 Boundary Protection good match

SC-7 mandates control at all external and key internal interfaces, preventing access-control bypass through alternate hardware paths.

CM-7 Least Functionality partial match

CM-7 disables or restricts unnecessary ports and interfaces, eliminating many alternate hardware paths before they can be exploited.

SC-3 Security Function Isolation partial match

SC-3 isolates security functions so that alternate interfaces cannot reach protected assets without passing through the reference monitor.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

DE.CM-09 partial match
degrades

CWE-1299 can impair DE.CM-09 by letting adverse events on unguarded alternate interfaces evade monitoring that assumes primary paths, yet the weakness only affects one narrow slice of the broad monitoring outcome.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.27 Secure system architecture and engineering principles mostly match
prevents

Secure system architecture and engineering principles require protection of all interfaces, directly addressing unguarded alternate hardware paths.

A.8.29 Security testing in development and acceptance mostly match
finds

Security testing can discover alternate-path weaknesses but does not inherently prevent them.

A.8.3 Information access restriction partial match
prevents

Information access restriction mandates controls on every path to protected assets, mitigating bypass via shadow or external interfaces.

A.8.20 Networks security none match
none

Network security controls can limit exposure of alternate hardware interfaces but do not address internal hardware-level bypasses.

A.8.28 Secure coding none match
none

Secure coding practices reduce software-level bypasses but do not cover hardware interface protections.

References