CWE-1310: Missing Ability to Patch ROM Code
Missing an ability to patch ROM code may leave a System or System-on-Chip (SoC) in a vulnerable state.
A kind of CWE-1329 Reliance on Component That is Not Updateable.
From the CWE List. © The MITRE Corporation.
Newest
- hikvision ds-kd8003, ds-kd8005, ds-kv6103 +10 more +12 more There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products.... 6.1 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification 5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 more Windows BitLocker Security Feature Bypass Vulnerability 6.1 Medium
- bouncycastle bc-java In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode 7.4 High