目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-1310 类漏洞列表 1

CWE-1310 类弱点 1 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-1310指系统或片上系统因ROM代码缺乏补丁能力而处于脆弱状态。由于ROM代码不可变，一旦其中存在安全漏洞，攻击者可利用这些固有缺陷进行持久化攻击或绕过安全机制，且无法通过常规软件更新修复。开发者应在设计阶段引入可更新的固件层或安全启动机制，确保关键安全逻辑具备动态修补能力，从而消除ROM代码中的长期安全隐患。

MITRE CWE 官方描述
CWE：CWE-1310 缺少修补 ROM 代码的能力 缺少修补 ROM 代码的能力可能导致系统或片上系统（SoC）处于易受攻击的状态。 采用利用信任根（RoT）等安全机制的启动流程的系统或片上系统（SoC）通常从执行只读存储器（ROM）组件中的代码开始。ROM 中的代码是不可变的，因此，在已部署使用的系统中，发现的 ROM 代码中的任何安全漏洞都无法得到修复。一个常见的弱点是，ROM 在系统出货后若发现安全漏洞，则不具备修补能力。这使得系统处于易受攻击的状态，攻击者可以借此攻破片上系统（SoC）。
常见影响 (1)
Other Varies by Context, Reduce Maintainability
When the system is unable to be patched, it can be left in a vulnerable state.
缓解措施 (2)
Architecture and Design, Implementation Secure patch support to allow ROM code to be patched on the next boot.
Effectiveness: Moderate
Architecture and Design, Implementation Support patches that can be programmed in-field or during manufacturing through hardware fuses. This feature can be used for limited patching of devices after shipping, or for the next batch of silicon devices manufactured, without changing the full device ROM.
Effectiveness: Moderate
代码示例 (2)
A System-on-Chip (SOC) implements a Root-of-Trust (RoT) in ROM to boot secure code. However, at times this ROM code might have security vulnerabilities and need to be patched. Since ROM is immutable, it can be impossible to patch.
The example code is taken from the SoC peripheral wrapper inside the buggy OpenPiton SoC of HACK@DAC'21. The wrapper is used for connecting the communications between SoC peripherals, such as crypto-engines, direct memory access (DMA), reset controllers, JTAG, etc. The secure implementation of the SoC wrapper should allow users to boot from a ROM for Linux (i_bootrom_linux) or from a patchable ROM…
... bootrom i_bootrom_patch ( .clk_i                   , .req_i      ( rom_req   ), .addr_i     ( rom_addr  ), .rdata_o    ( rom_rdata_patch ) ); bootrom_linux i_bootrom_linux ( .clk_i                   , .req_i      ( rom_req   ), .addr_i     ( rom_addr  ), .rdata_o    ( rom_rdata_linux ) ); assign rom_rdata = (ariane_boot_sel_i) ? rom_rdata_linux : rom_rdata_linux; ...
Bad · Verilog
... bootrom i_bootrom_patch ( .clk_i                   , .req_i      ( rom_req   ), .addr_i     ( rom_addr  ), .rdata_o    ( rom_rdata_patch ) ); bootrom_linux i_bootrom_linux ( .clk_i                   , .req_i      ( rom_req   ), .addr_i     ( rom_addr  ), .rdata_o    ( rom_rdata_linux ) ); assign rom_rdata = (ariane_boot_sel_i) ? rom_rdata_patch : rom_rdata_linux; ...
Good · Verilog
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-55338 Microsoft Windows BitLocker 安全漏洞 — Windows 10 Version 1507 6.1 Medium 2025-10-14

CWE-1310 是常见的弱点类别，本平台收录该类弱点关联的 1 条 CVE 漏洞。