cve.bz

CWE-1314: Missing Write Protection for Parametric Data Values

Filter

The device does not write-protect the parametric data values for sensors that scale the sensor value, allowing untrusted software to manipulate the apparent result and potentially damage hardware or cause operational failure.

What the weakness is: CWE-1314 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-1314, as MITRE names them. Credits.

Ask an AI about CWE-1314

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1314: Missing Write Protection for Parametric Data Values and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1314.html and https://cve.bz/cve/cwe/1314?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.7CVE-2026-40188EPSS 0.3%

    goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, the SFTP command rename sanitizes only the source path and not the destination, so it is possible to write outside of the root directory of the SFTP. This vulner…