Security-Sensitive Hardware Controls with Missing Lock Bit Protection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot FeatureCVE-2022-23005Jedec · CVSS 8.7 · 0.8% likely
2. Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows a…CVE-2025-25734Kapsch · CVSS 6.8 · 0.4% likely

   Kapsch

3. Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically p…CVE-2025-25733Kapsch · CVSS 3.5 · 0.3% likely

   Kapsch

4. Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowin…CVE-2025-25735Kapsch · CVSS 4.6 · 0.3% likely

   Kapsch

5. Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impact…CVE-2024-36309AMD · CVSS 4.6 · 0.1% likely

   AMD

6. Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arb…CVE-2025-61972AMD · CVSS 8.5 · 0.1% likely

   AMD

7. Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest…CVE-2025-61971AMD · CVSS 5.9 · 0.1% likely

   AMD

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.