CWE-1222 - CERT CVE

CWE-1222 - Insufficient Granularity of Address Regions Protected by Register Locks

The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.

CAPEC ID Naziv
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels