CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks
low-riskThe product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.
Abstraction: Variant
Common Consequences
Access Control
→
Other
Real-World Examples (1)
| CVE | CVSS | EPSS | KEV |
|---|---|---|---|
| CVE-2025-21283 | 6.5 | 0.4% | — |
0
/ 100
low-risk
Active Threat
0/50 · Minimal
Exploit Availability
0/50 · Minimal