Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1328: Security Version Number Mutable to Older Versions

Base Draft

The security version number in the hardware product is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.

How to prevent it (2 mitigations)

  1. Architecture and Design

    The security version number must be stored securely and persistently across power-on resets. When architecting the system, security version data should be designated for storage in registers that are either read-only or have access controls that prevent modification by an untrusted agent.

  2. Implementation

    During implementation and test, security version data should be demonstrated to be read-only and access controls should be validated.

Source: MITRE CWE-1328

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-5825

    Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability

    Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial charging statio…

    Autel Autel MaxiCharger AC Wallbox Commercial