Weakness (CWE)
CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component
Base Incomplete
The product's data removal process does not completely delete all data and potentially sensitive information within hardware components.
How to prevent it (2 mitigations)
-
Architecture and Design
Apply blinding or masking techniques to implementations of cryptographic algorithms.
-
Implementation
Alter the method of erasure, add protection of media, or destroy the media to protect the data.
Source: MITRE CWE-1301
2 results · Feed
-
Medium 4.5
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can poten…
-
Critical 10.0
Malicious / Malformed App can be Installed but not Uninstalled
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.