CWE-1328: Security Version Number Mutable to Older Versions
Security-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.
5 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-5825 — Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability
- CVE-2025-8321 — Tesla Wall Connector Firmware Downgrade Vulnerability
- CVE-2025-29989 — Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged
- CVE-2024-13870 — Unauthenticated Firmware Downgrade in Bitdefender Box v1
Recently published
- CVE-2025-8321 — Tesla Wall Connector Firmware Downgrade Vulnerability
- CVE-2025-5825 — Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability
- CVE-2025-29989 — Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged
- CVE-2024-13870 — Unauthenticated Firmware Downgrade in Bitdefender Box v1