Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1282: Assumed-Immutable Data is Stored in Writable Memory

Base Incomplete

Immutable data, such as a first-stage bootloader, device identifiers, and "write-once" configuration settings are stored in writable memory that can be re-programmed or updated in the field.

How to prevent it (1 mitigation)

  1. Implementation

    Storing immutable code or data in read-only memory
    (ROM), fuses, or one-time programmable (OTP) memory
    provides strong integrity guarantees and provides a
    root of trust for securing the rest of the system.

Source: MITRE CWE-1282

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-25358

    FileOptimizer 14.00.2524 - Denial of Service

    FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini configuration file. Attackers can overwrite the TempDirectory parameter with a 5000-character buffer to …

    nikkhokkho FileOptimizer
  • High 8.4
    CVE-2022-2483

    The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for fi…

    Nokia ASIK AirScale