CyberSecBulletin

Improper Restriction of Write-Once Bit Fields

CWE-1224

The hardware design control register sticky bits or write-once bit fields are improperly implemented, such that they can be reprogrammed by software.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 8.7.

How this weakness is prevented

  • Architecture and Design: During hardware design, all register write-once or sticky fields must be evaluated for proper configuration.

Latest Improper Restriction of Write-Once Bit Fields vulnerabilities

  • 8.7 High severity

    Universal Flash Storage: Improper Synchronization

    CVE-2022-23005Jedec

    Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. T