CWE-1329 Reliance on Component That is Not Updateable
baseThe product contains a component that cannot be updated or patched in order to remove vulnerabilities or significant bugs.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
03
Schwachstellen (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-34381US | critical9.8 | — | ||
Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unaut… | ||||
| CVE-2021-38398US | medium6.8 | — | ||
The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit th… | ||||
| CVE-2026-8863US | — | Exploit | ||
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use… | ||||
| CVE-2026-48576US | — | — | ||
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-48573US | — | — | ||
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-41097US | — | — | ||
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-21265US | — | — | ||
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versio… | ||||
04
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan