Improper Access Control for Register Interface
CWE-1262
The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.
We track 4 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.7.
How this weakness is prevented
- Architecture and Design: Design proper policies for hardware register access from software.
- Implementation: Ensure that access control policies for register access are implemented in accordance with the specified design.
Latest Improper Access Control for Register Interface vulnerabilities
- 7.9 High severity
AMD EPYC™ 7002 Series Processors: Improper Access Control for Register Interface
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity
- 7.0 High severity
i11: Improper Access Control
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interfa
- 7.2 High severity
Remote Desktop Manager: Improper Access Control for Register Interface
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.
- 8.7 High severity
Universal Flash Storage: Improper Synchronization
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. T