CWE-1233 · Race Conditions
Security-Sensitive Hardware Controls with Missing Lock Bit Protection
7CVEs
SortMost likely exploited
7 CVEs with CWE-1233 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-23005Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot FeatureJedec · Universal Flash Storage · CVSS 8.7 · 2023-01-23 | 8.7 | 0.8% | 2023-01-23 |
| CVE-2025-25734Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows a…Kapsch · Ris-9160 Firmware · CVSS 6.8 · 2025-08-26 | 6.8 | 0.4% | 2025-08-26 |
| CVE-2025-25733Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically p…Kapsch · Ris-9160 Firmware · CVSS 3.5 · 2025-08-26 | 3.5 | 0.3% | 2025-08-26 |
| CVE-2025-25735Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowin…Kapsch · Ris-9160 Firmware · CVSS 4.6 · 2025-08-26 | 4.6 | 0.3% | 2025-08-26 |
| CVE-2024-36309Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impact…AMD · AMD EPYC™ 9004 Series Processors · CVSS 4.6 · 2026-11-10 | 4.6 | 0.1% | 2026-11-10 |
| CVE-2025-61972Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arb…AMD · AMD EPYC™ 9004 Series Processors · CVSS 8.5 · 2026-05-13 | 8.5 | 0.1% | 2026-05-13 |
| CVE-2025-61971Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest…AMD · AMD EPYC™ 9004 Series Processors · CVSS 5.9 · 2026-05-13 | 5.9 | 0.1% | 2026-05-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.