VYPR

CWE-1328

Security Version Number Mutable to Older Versions

BaseDraft

Description

Security-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-176

CVEs mapped to this weakness (5)

  • CVE-2025-5825HigJun 25, 2025
    risk 0.49cvss 7.5epss 0.00

    Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must…

  • CVE-2025-8321MedJul 30, 2025
    risk 0.44cvss 6.8epss 0.00

    Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2024-13870MedMar 12, 2025
    risk 0.37cvss 5.7epss 0.00

    An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmware to an older, potentially vulnerable version of a Bitdefender-signed firmware. The attack…

  • CVE-2023-50738MedJan 17, 2025
    risk 0.28cvss 4.3epss 0.00

    A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.

  • CVE-2025-29989LowApr 10, 2025
    risk 0.20cvss 3.1epss 0.00

    Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.