CWE-1328: Security Version Number Mutable to Older Versions
Filter
The security version number in the hardware product is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.
What the weakness is: CWE-1328 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-176 Configuration/Environment Manipulation Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-1328, as MITRE names them. Credits.
Ask an AI about CWE-1328
Show the prompt
Explain CWE-1328: Security Version Number Mutable to Older Versions and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1328.html and https://cve.bz/cve/cwe/1328?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2026-104619EPSS 0.1%
Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation.
- 6.6CVE-2026-81051EPSS 0.2%
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection m…
- 6.8CVE-2025-8321EPSS 0.4%
Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit th…
- 7.5CVE-2025-5825EPSS 0.3%
Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commer…
- 4.4CVE-2025-29989EPSS 0.1%
Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.
- 1.8CVE-2024-13870EPSS 0.2%
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmware to an older, potentially vulnerable version of a Bitdef…
- 4.3CVE-2023-50738EPSS 0.3%
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.