CWE-1304: Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation
Filter
The product performs a power save/restore operation, but it does not ensure that the integrity of the configuration state is maintained and/or verified between the beginning and ending of the operation.
What the weakness is: CWE-1304 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-176 Configuration/Environment Manipulation Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-1304, as MITRE names them. Credits.
Ask an AI about CWE-1304
Show the prompt
Explain CWE-1304: Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1304.html and https://cve.bz/cve/cwe/1304?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.1CVE-2023-31316EPSS 0.10%
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the e…
- 4.6CVE-2024-23485EPSS 0.2%
Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to momentarily allow fre…