cve.bz

CWE-1310: Missing Ability to Patch ROM Code

Filter

Missing an ability to patch ROM code may leave a System or System-on-Chip (SoC) in a vulnerable state.

What the weakness is: CWE-1310 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-682 Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-1310, as MITRE names them. Credits.

Ask an AI about CWE-1310

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1310: Missing Ability to Patch ROM Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1310.html and https://cve.bz/cve/cwe/1310?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2026-85544EPSS 0.4%

    Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, ther…

  2. 7.5CVE-2026-59847EPSS 0.3%

    A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

  3. 4.6CVE-2025-55338EPSS 3.1%

    Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.