CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component
The product's data removal process does not completely delete all data and potentially sensitive information within hardware components.
A kind of CWE-226 Sensitive Information in Resource Not Removed Before Reuse.
From the CWE List. © The MITRE Corporation.
Newest
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush... 4.5 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Malicious / Malformed App can be Installed but not Uninstalled 10.0 Critical