CWE-1231: Improper Prevention of Lock Bit Modification
The product uses a trusted lock bit for restricting access to registers, address regions, or other resources, but the product does not prevent the value of the lock bit from being modified after it has been set.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to... 6.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +33 more +35 more Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker... 7.5 High
- nvidia sbios, dgx servers +1 more DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a... 6.0 Medium