cve.bz

CWE-1262: Improper Access Control for Register Interface

Filter

The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.

What the weakness is: CWE-1262 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-680 Exploitation of Improperly Controlled Registers Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-1262, as MITRE names them. Credits.

Ask an AI about CWE-1262

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1262: Improper Access Control for Register Interface and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1262.html and https://cve.bz/cve/cwe/1262?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2025-33207EPSS 0.2%

    NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of…

  2. 4.0CVE-2025-54509EPSS 0.1%

    Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrit…

  3. 7.8CVE-2025-47385EPSS 0.08%

    Memory Corruption when accessing trusted execution environment without proper privilege check.

  4. 3.3CVE-2025-36194EPSS 0.1%

    IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations.

  5. 4.4CVE-2025-20788EPSS 0.08%

    In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS101…

  6. 7.9CVE-2023-20599EPSS 0.2%

    Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading …

  7. 6.5CVE-2024-45556EPSS 0.09%

    Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

  8. 5.5CVE-2024-57492EPSS 0.2%

    An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton.

  9. 2.3CVE-2025-1882EPSS 0.2%

    A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control…

  10. 7.2CVE-2024-6354EPSS 0.8%

    Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.

  11. 8.7CVE-2022-23005EPSS 0.8%

    Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS complia…

  12. 7.8CVE-2015-8325EPSS 0.6%

    The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggerin…