CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks

low-risk

The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.

Abstraction: Variant

Common Consequences

Access Control Other

Real-World Examples (1)

CVE CVSS EPSS KEV
CVE-2025-21283 6.5 0.4%
0
/ 100
low-risk
Active Threat 0/50 · Minimal
Exploit Availability 0/50 · Minimal