CWE-1231 · 3 записей
Improper Prevention of Lock Bit Modification
CVE этого класса
3 записей
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2022-42285Эксплойта нет | DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, nvidia · sbios · CWE-1231 | Высокая7,8 | — | 0,1 % | 12 янв. 2023 г. |
30Наблюдать | CVE-2024-36354Эксплойта нет | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sysamd · amd ryzen™ threadripper™ 3000 processors · CWE-1231 | Высокая7,5 | — | 0,1 % | 6 сент. 2025 г. |
26Наблюдать | CVE-2025-52536Эксплойта нет | Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting iamd · amd epyc™ 9004 series processors · CWE-1231 | Средняя6,7 | — | 0,1 % | 10 февр. 2026 г. |
- CVE-2022-4228531Наблюдать
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection,
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %nvidia · sbios12 янв. 2023 г.
- CVE-2024-3635430Наблюдать
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %amd · amd ryzen™ threadripper™ 3000 processors6 сент. 2025 г.
- CVE-2025-5253626Наблюдать
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting i
СредняяCVSS 6,7Эксплойта нетEPSS 0 %amd · amd epyc™ 9004 series processors10 февр. 2026 г.