CWE-1328
Security Version Number Mutable to Older Versions
Security-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.
Impactr finds and proves whether CWE-1328 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.