CWE-1233 · 4 records

Security-Sensitive Hardware Controls with Missing Lock Bit Protection

CVEs in this class

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2025-61972No exploit	Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMamd · amd epyc™ 9004 series processors · CWE-1233 RCE Local privilege escalation	High8.5	—	0.1%	May 13, 2026
23Monitor	CVE-2025-61971No exploit	Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentiaamd · amd epyc™ 9004 series processors · CWE-1233 Local privilege escalation	Medium5.9	—	0.1%	May 13, 2026
18Monitor	CVE-2025-25735No exploit	Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Prkapsch · ris-9160 firmware · CWE-1233	Medium4.6	—	0.3%	Aug 26, 2025
14Monitor	CVE-2025-25733No exploit	Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42,kapsch · ris-9160 firmware · CWE-1233	Low3.5	—	0.3%	Aug 26, 2025

CVE-2025-61972
34Monitor
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SM
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
amd · amd epyc™ 9004 series processorsMay 13, 2026
CVE-2025-61971
23Monitor
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentia
MediumCVSS 5.9No exploitEPSS 0%
- Local privilege escalation
amd · amd epyc™ 9004 series processorsMay 13, 2026
CVE-2025-25735
18Monitor
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Pr
MediumCVSS 4.6No exploitEPSS 0%
kapsch · ris-9160 firmwareAug 26, 2025
CVE-2025-25733
14Monitor
Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42,
LowCVSS 3.5No exploitEPSS 0%
kapsch · ris-9160 firmwareAug 26, 2025