CWEweakness

CWE-1246 Improper Write Handling in Limited-write Non-Volatile Memories

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product does not implement or incorrectly implements wear leveling operations in limited-write non-volatile memories.

Common consequences

• Availability: DoS: Instability — If wear leveling is improperly implemented, attackers may be able to programmatically cause the storage to become unreliable within a much shorter time than would normally be expected.

Potential mitigations

• [Architecture and Design, Implementation, Testing] Include secure wear leveling algorithms and ensure they may not be bypassed.

Related

Attack pattern · CAPEC (1)

  • CAPEC-212 Functionality Misuse attack pattern

Child of · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-212 Functionality Misuse attack pattern

Referenced by CVE · weakness (2)

  • CVE-2024-36432 An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with… vulnerability
  • CVE-2023-32229 Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be… vulnerability