Common Weakness Enumeration

    CWE Definition / CWE-1328

    CWE-1328: Security Version Number Mutable to Older Versions

    Security-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.

    Published:25 Apr 2020
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-285: Improper Authorization

    CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')