CWE-1233: Security-Sensitive Hardware Controls with Missing Lock Bit Protection
The product uses a register lock bit protection mechanism, but it does not ensure that the lock bit prevents modification of system registers or controls that perform changes to important hardware system configuration.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ 9005 series processors +4 more +6 more Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution… 8.5 High
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity. 5.9 Medium
- kapsch ris-9160 firmware, ris-9260 firmware +1 more Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4... 4.6 Medium
- kapsch ris-9160 firmware, ris-9260 firmware +1 more Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4... 6.8 Medium
- kapsch ris-9160 firmware, ris-9260 firmware +1 more Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside... 3.5 Low
- na, jedec universal flash storage +1 more Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature 8.7 High