Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1328: Security Version Number Mutable to Older Versions

Base Draft

The security version number in the hardware product is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.

How to prevent it (2 mitigations)

  1. Architecture and Design

    The security version number must be stored securely and persistently across power-on resets. When architecting the system, security version data should be designated for storage in registers that are either read-only or have access controls that prevent modification by an untrusted agent.

  2. Implementation

    During implementation and test, security version data should be demonstrated to be read-only and access controls should be validated.

Source: MITRE CWE-1328

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.