Weakness (CWE)
CWE-1262: Improper Access Control for Register Interface
The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
More detail
Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.
How to prevent it (2 mitigations)
-
Architecture and Design
Design proper policies for hardware register access from software.
-
Implementation
Ensure that access control policies for register access are implemented in accordance with the specified design.
Source: MITRE CWE-1262
5 results · Clear filters · Feed
-
High 7.8
Improper Access Control for Register Interface in SCE-Mink
Memory Corruption when accessing trusted execution environment without proper privilege check.
-
High 7.9
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto …
-
High 7.2
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows …
-
High 8.7
Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. …
-
High 7.8
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM i…