Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1272: Sensitive Information Uncleared Before Debug/Power State Transition

Base

The product performs a power or debug state transition, but it does not clear sensitive information that should no longer be accessible due to changes to information access restrictions.

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation

    During state transitions, information not needed in the next state should be removed before the transition to the next state.

Source: MITRE CWE-1272

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.4
    CVE-2023-41967

    Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacke…

    Gallagher Controller 6000
  • High 7.5
    CVE-2020-22656

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n…