2116
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1197 Integration Issues 1194 2470
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
References
[REF-1362]"ariane.sv". 2021. < https://github.com/HACK-EVENT/hackatdac21/blob/
b9ecdf6068445d76d6bee692d163fededf7a9d9b/piton/design/chip/tile/ariane/src/
ariane.sv#L539:L540 >.2023-07-15.
[REF-1363]"Fix CWE-1276". 2021. < https://github.com/HACK-EVENT/hackatdac21/
blob/9a796ee83e21f59476d4b0a68ec3d8e8d5148214/piton/design/chip/tile/ariane/src/
ariane.sv#L539:L540 >.2023-09-01.
CWE-1277: Firmware Not Updateable
Weakness ID : 1277
Structure : Simple
Abstraction : Base
Description
The product does not provide its users with the ability to update or patch its firmware to address
any vulnerabilities or weaknesses that may be present.
Extended Description
Without the ability to patch or update firmware, consumers will be left vulnerable to exploitation of
any known vulnerabilities, or any vulnerabilities that are discovered in the future. This can expose
consumers to permanent risk throughout the entire lifetime of the device, which could be years
or decades. Some external protective measures and mitigations might be employed to aid in
preventing or reducing the risk of malicious attack, but the root weakness cannot be corrected.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1329 Reliance on Component That is Not Updateable 2219
Weakness Ordinalities
Primary :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
CWE Version 4.14
CWE-1277: Firmware Not Updateable
CWE-1277: Firmware Not Updateable