Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1326: Missing Immutable Root of Trust in Hardware

Base Draft

A missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.

How to prevent it (2 mitigations)

  1. Architecture and Design

    When architecting the system, the RoT should be designated for storage in a memory that does not allow further programming/writes. Note that, for components like ROM, secure patching/update features should be supported to allow authenticated and authorized updates in the field.

  2. Implementation

    During implementation and test, the RoT memory location should be demonstrated to not allow further programming/writes.

Source: MITRE CWE-1326

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.