CWE-1282: Assumed-Immutable Data is Stored in Writable Memory
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
Immutable data, such as a first-stage bootloader, device identifiers, and "write-once" configuration settings are stored in writable memory that can be re-programmed or updated in the field.
常见后果
影响范围: Integrity
技术影响: Varies by Context
潜在缓解措施
阶段: Implementation
描述: All immutable code or data should be programmed into ROM or write-once memory.
引入模式
| 阶段 | 说明 |
|---|---|
| Implementation | Keys, code, configuration settings, and other data should be programmed in write-once or read-only memory instead of writable memory. |