Improper Access Control for Register Interface

The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-54509 - - Jun 17, 2026 Jun 9, 2026 4.0 MEDIUM· v4 N/A· v3 N/A· v2 Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor (ASP) potentially resulting i...Show more Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor (ASP) potentially resulting in loss of integrity.Show less
CVE-2025-47385 1Qualcomm 93Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+90 more Jun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing trusted execution environment without proper privilege check.
CVE-2025-36194 1Ibm 1Powervm Hypervisor Jun 17, 2026 Feb 2, 2026 N/A· v4 3.3 LOW· v3 N/A· v2 IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during ce...Show more IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations.Show less
CVE-2025-20788 1Google 1Android Jun 17, 2026 Dec 2, 2025 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...Show more In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.Show less
CVE-2023-20599 - - Jun 17, 2026 Jun 10, 2025 N/A· v4 7.9 HIGH· v3 N/A· v2 Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key poi...Show more Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.Show less
CVE-2024-45556 1Qualcomm 60Fastconnect 6900 Firmware Fastconnect 7800 FirmwareImmersive Home 3210 Platform Firmware+57 more Jun 17, 2026 Apr 7, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
CVE-2024-57492 1Redox Os 1Redox Jun 17, 2026 Mar 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton.
CVE-2025-1882 1I Drive 2I11 Firmware I12 Firmware Jun 17, 2026 Mar 3, 2025 2.3 LOW· v4 7.0 HIGH· v3 4.3 MEDIUM· v2 A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to impr...Show more A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interface. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.Show less
CVE-2024-6354 1Devolutions 1Remote Desktop Manager Jun 17, 2026 Jun 26, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.
CVE-2022-23005 1Jedec 1Universal Flash Storage Jun 17, 2026 Jan 23, 2023 N/A· v4 8.7 HIGH· v3 N/A· v2 Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to bo...Show more Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. The UFS Boot feature, as specified in the UFS standard, is provided by UFS devices to support platforms that need to download the system boot loader from external non-volatile storage locations. Several scenarios have been identified in which adversaries may disable the boot capability, or revert to an old boot loader code, if the host boot ROM code is improperly implemented. UFS Host Boot ROM implementers may be impacted by this vulnerability. UFS devices are only impacted when connected to a vulnerable UFS Host and are not independently impacted by this vulnerability. When present, the vulnerability is in the UFS Host implementation and is not a vulnerability in Western Digital UFS Devices. Western Digital has provided details of the vulnerability to the JEDEC standards body, multiple vendors of host processors, and software solutions providers.Show less