Common Weakness Enumeration

    CWE Definition / CWE-1328

    CWE-1328: Security Version Number Mutable to Older Versions

    The security version number in the hardware product is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.

    Published:25 Apr 2020
    Organization:MITRE
    Modified:28 Oct 2026

    Related Weakness

    CWE-285: Improper Authorization

    CWE-757: Selection of Less-Secure Algorithm During Negotiation