cve.bz

CWE-1272: Sensitive Information Uncleared Before Debug/Power State Transition

Filter

The product performs a power or debug state transition, but it does not clear sensitive information that should no longer be accessible due to changes to information access restrictions.

What the weakness is: CWE-1272 at MITRE. All weaknesses

Related attack patterns (CAPEC): 4
  • CAPEC-37 Retrieve Embedded Sensitive Data Likelihood: High · Severity: Very High
  • CAPEC-150 Collect Data from Common Resource Locations Severity: Medium
  • CAPEC-545 Pull Data from System Resources
  • CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment Likelihood: Low · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-1272, as MITRE names them. Credits.

Ask an AI about CWE-1272

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1272: Sensitive Information Uncleared Before Debug/Power State Transition and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1272.html and https://cve.bz/cve/cwe/1272?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.6CVE-2023-41967EPSS 0.3%

    Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its confi…

  2. 7.5CVE-2020-22656EPSS 0.5%

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) befo…