Weakness (CWE)
CWE-1326: Missing Immutable Root of Trust in Hardware
A missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.
How to prevent it (2 mitigations)
-
Architecture and Design
When architecting the system, the RoT should be designated for storage in a memory that does not allow further programming/writes. Note that, for components like ROM, secure patching/update features should be supported to allow authenticated and authorized updates in the field.
-
Implementation
During implementation and test, the RoT memory location should be demonstrated to not allow further programming/writes.
Source: MITRE CWE-1326
3 results · Clear filters · Feed
-
Medium 4.4
Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability
Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Although authentication …
-
Medium 4.2
A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Ch…
-
Medium 4.6
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on…