ID: LOW-01

Title: JTAG interface accessible on production hardware

Severity: Low

CVSS Score: 2.4

CVSS Vector String: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description: A JTAG debug interface was found to be accessible on the device PCB, having identified one device in the JTAG chain. The presence of an accessible JTAG interface on a production device provides a physical attack vector for anyone with access to the hardware.

Remediation: Remove or disable JTAG pads on production hardware. If JTAG must remain present, implement hardware-level debug port protection or fuse-based locking.

More information: See JTAG Interface Discovery chapter.