cve.bz

CWE-1256: Improper Restriction of Software Interfaces to Hardware Features

Filter

The product provides software-controllable device functionality for capabilities such as power and clock management, but it does not properly limit functionality that can lead to modification of hardware memory or register bits, or the ability to observe physical side channels.

What the weakness is: CWE-1256 at MITRE. All weaknesses

Related attack patterns (CAPEC): 2
  • CAPEC-624 Hardware Fault Injection Likelihood: Low · Severity: High
  • CAPEC-625 Mobile Device Fault Injection

The attack patterns MITRE's CAPEC relates to CWE-1256, as MITRE names them. Credits.

Ask an AI about CWE-1256

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1256: Improper Restriction of Software Interfaces to Hardware Features and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1256.html and https://cve.bz/cve/cwe/1256?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2026-90891EPSS 0.1%

    ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restrict…

  2. 5.8CVE-2026-75811EPSS 0.1%

    Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing cri…

  3. 7.3CVE-2024-5477EPSS 0.2%

    A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that re…

  4. 5.7CVE-2024-48869EPSS 0.1%

    Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when using Intel(R) Trust Domain Extensions (Intel(R) TDX) or Intel(R) Software Guard Extensions (Intel(R) SGX) may allow a…

  5. 8.8CVE-2024-2881EPSS 0.5%

    Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information an…

  6. 8.8CVE-2024-1545EPSS 0.6%

    Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and e…