CWE-1328: Security Version Number Mutable to Older Versions
The security version number in the hardware product is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- dell thinos, thinos 10 +1 more Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to... 6.6 Medium
- tesla wall connector, wall connector firmware +1 more Tesla Wall Connector Firmware Downgrade Vulnerability 6.8 Medium
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 more Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability 7.5 High
- dell client platform bios, precision 5820 tower firmware, precision 7820 tower firmware +2 more +4 more Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions... 3.1 Low
- bitdefender box v1, box firmware +1 more Unauthenticated Firmware Downgrade in Bitdefender Box v1 1.8 Low
- lexmark printer firmware A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices. 4.3 Medium