2217
Nature Type ID Name Page
MemberOf 1403 Comprehensive Categorization: Exposed Resource 1400 2528
Related Attack Patterns
CAPEC-ID Attack Pattern Name
1 Accessing Functionality Not Properly Constrained by ACLs
References
[REF-1158]Akond Rahman, Md Rayhanur Rahman, Chris Parnin and Laurie Williams. "Security
Smells in Ansible and Chef Scripts: A Replication Study". 2020 June 0. < https://arxiv.org/
pdf/1907.07159.pdf >.
[REF-1159]Akond Rahman, Chris Parnin and Laurie Williams. "The Seven Sins: Security Smells
in Infrastructure as Code Scripts". ICSE '19: Proceedings of the 41st International Conference on
Software Engineering. 2019 May. < https://dl.acm.org/doi/10.1109/ICSE.2019.00033 >.2023-04-07.
CWE-1328: Security Version Number Mutable to Older Versions
Weakness ID : 1328
Structure : Simple
Abstraction : Base
Description
Security-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the
boot firmware to vulnerable code versions.
Extended Description
A System-on-Chip (SoC) implements secure boot or verified boot. It might support a security
version number, which prevents downgrading the current firmware to a vulnerable version.
Once downgraded to a previous version, an adversary can launch exploits on the SoC and thus
compromise the security of the SoC. These downgrade attacks are also referred to as roll-back
attacks.
The security version number must be stored securely and persistently across power-on resets. A
common weakness is that the security version number is modifiable by an adversary, allowing rollback
or downgrade attacks or, under certain circumstances, preventing upgrades (i.e. Denial-of-
Service on upgrades). In both cases, the SoC is in a vulnerable state.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 285 Improper Authorization 684
PeerOf 757 Selection of Less-Secure Algorithm During Negotiation
('Algorithm Downgrade')