Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1283: Mutable Attestation or Measurement Reporting Data

Base Incomplete

The register contents used for attestation or measurement reporting data to verify boot flow are modifiable by an adversary.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Measurement data should be stored in registers that are read-only or otherwise have access controls that prevent modification by an untrusted agent.

Source: MITRE CWE-1283

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.