Prevent firmware downgrades
Summary
Devices should have mechanisms that protect their firmware (anti-rollback) from being downgraded.
Description
Attackers may attempt to exploit vulnerabilities in older firmware versions that have been patched in newer releases. Anti-rollback features help to mitigate the risk of exploitation by preventing the installation of outdated and insecure firmware.
Supported In
This requirement is verified in following services
| Plan | Supported |
|---|---|
| Essential | 🔴 |
| Advanced | 🟢 |
References
- CWEâ„¢-693. Protection mechanism failure
- Agile Alliance-3. Deliver working software frequently
- MITRE ATT&CK®-M1033. Limit software installation
- NIST 800-171-1_18. Control connection of mobile devices
- C2M2-9_3_l. Implement IT and OT asset security for cybersecurity architecture
Vulnerabilities
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.