ID: LOW-02

Title: UART interface accessible on production hardware

Severity: Low

CVSS Score: 2.4

CVSS Vector String: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description: A UART debug interface was found to be accessible on the device PCB, through pin identification via multimeter and subsequent confirmation through observed output enabled by a USB-to-TTL adapter. The presence of an accessible UART interface on a production device provides a physical attack vector for anyone with access to the hardware.

Remediation: Remove or disable UART pads on production hardware. If UART must remain present, implement hardware-level debug port protection or fuse-based locking.

More information: See UART Interface Discovery chapter.