Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1330: Remanent Data Readable after Memory Erase

Variant Draft

Confidential information stored in memory circuits is readable or recoverable after being cleared or erased, i.e., there is data remanence.

How to prevent it (1 mitigation)

  1. Architecture and Design

    - Support for secure-erase commands that apply multiple cycles of overwriting memory with known patterns and of erasing actual content.

    - Support for cryptographic erase in self-encrypting, memory devices.

    - External, physical tools to erase memory such as ultraviolet-rays-based erase of Electrically erasable, programmable, read-only memory (EEPROM).

    - Physical destruction of media device. This is done for repurposed or scrapped devices that are no longer in use.

Source: MITRE CWE-1330

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.