CWE-1277: Firmware Not Updateable

Filter

The product does not provide its users with the ability to update or patch its firmware to address any vulnerabilities or weaknesses that may be present.

What the weakness is: CWE-1277 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1

CAPEC-682 Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-1277, as MITRE names them. Credits.

Ask an AI about CWE-1277

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-1277: Firmware Not Updateable and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1277.html and https://cve.bz/cve/cwe/1277?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.2CVE-2026-6484EPSS 0.4%2026-08-12
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.