CWE-1274: Improper Access Control for Volatile Memory Containing Boot Code
The product conducts a secure-boot process that transfers bootloader code from Non-Volatile Memory (NVM) into Volatile Memory (VM), but it does not have sufficient access control or other protections for the Volatile Memory.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +15 more +17 more Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could... 4.6 Medium
- amd epyc™ 7001 series processors, epyc™ 7002 series processors, epyc™ 7003 series processors +17 more +19 more Improper input validation in system management mode (SMM) could allow a privileged attacker to... 7.1 High
- blurams dome flare firmware A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier... 6.1 Medium
- entrust nshield 5c firmware, nshield connect xc base firmware, nshield connect xc high firmware +2 more +4 more The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through... 6.8 Medium
- flocksafety bravo compute box firmware Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader... 7.5 High
- milesight ug65-868m-ea, ug65-868m-ea firmware +1 more Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code 6.1 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors, epyc™ 9004 processors +22 more +24 more Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,... 7.5 High
- nokia asik airscale, asik airscale 474021a.101 firmware +1 more The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed... 8.4 High
- nokia asik airscale, asik airscale 474021a.101 firmware, asik airscale 474021a.102 firmware +2 more A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A... 8.4 High