CWE-1231 · 3 records
Improper Prevention of Lock Bit Modification
CVEs in this class
3 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2022-42285No exploit | DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, nvidia · sbios · CWE-1231 | High7.8 | — | 0.1% | Jan 12, 2023 |
30Monitor | CVE-2024-36354No exploit | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sysamd · amd ryzen™ threadripper™ 3000 processors · CWE-1231 | High7.5 | — | 0.1% | Sep 6, 2025 |
26Monitor | CVE-2025-52536No exploit | Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting iamd · amd epyc™ 9004 series processors · CWE-1231 | Medium6.7 | — | 0.1% | Feb 10, 2026 |
- CVE-2022-4228531Monitor
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection,
HighCVSS 7.8No exploitEPSS 0%nvidia · sbiosJan 12, 2023
- CVE-2024-3635430Monitor
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys
HighCVSS 7.5No exploitEPSS 0%amd · amd ryzen™ threadripper™ 3000 processorsSep 6, 2025
- CVE-2025-5253626Monitor
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting i
MediumCVSS 6.7No exploitEPSS 0%amd · amd epyc™ 9004 series processorsFeb 10, 2026