CWE-1328 Security Version Number Mutable to Older Versions

base

Security-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.

übergeordnete Schwächen

Übergeordnete Klassen, zu denen dies gehört.

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2024-13870US	medium5.7	0.17% (6th)	—	2025-03-12
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmw…
CVE-2025-29989US	medium4.4	0.14% (3rd)	—	2025-04-10
Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vu…
CVE-2026-81051US	—	0.20% (9th)	—	2026-09-10
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could pote…
CVE-2025-8321US	—	0.40% (35th)	—	2025-07-30
Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Conn…
CVE-2025-5825US	—	0.28% (20th)	—	2025-06-25
Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on af…
CVE-2023-50738US	—	0.27% (19th)	—	2025-01-17
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.

CAPEC-Angriffsmuster, die dies ausnutzen.

Wo diese Definition veröffentlicht ist.

scry

Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.