Weakness (CWE)
CWE-1262: Improper Access Control for Register Interface
The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
More detail
Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.
How to prevent it (2 mitigations)
-
Architecture and Design
Design proper policies for hardware register access from software.
-
Implementation
Ensure that access control policies for register access are implemented in accordance with the specified design.
Source: MITRE CWE-1262
12 results · Feed
-
Medium 6.8
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause im…
-
Medium 4.0
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privile…
-
High 7.8
Improper Access Control for Register Interface in SCE-Mink
Memory Corruption when accessing trusted execution environment without proper privilege check.
-
Low 2.8
This Power System update is being released to address
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations.
-
Medium 4.4
In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial o…
-
High 7.9
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto …
-
Medium 6.5
Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
-
Medium 6.0
An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up…
-
Medium 5.0
i-Drive i11/i12 Device Setting improper access control for register interface
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interf…
-
High 7.2
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows …
-
High 8.7
Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. …
-
High 7.8
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM i…