CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component
Filter
The product's data removal process does not completely delete all data and potentially sensitive information within hardware components.
What the weakness is: CWE-1301 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-37 Retrieve Embedded Sensitive Data Likelihood: High · Severity: Very High
The attack patterns MITRE's CAPEC relates to CWE-1301, as MITRE names them. Credits.
Ask an AI about CWE-1301
Show the prompt
Explain CWE-1301: Insufficient or Incomplete Data Removal within Hardware Component and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1301.html and https://cve.bz/cve/cwe/1301?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.5CVE-2025-29946EPSS 0.2%
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
- 10.0CVE-2025-12216EPSS 0.2%
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.