Code injection

2023-01-1012:15:00

PRIOn knowledge base

www.prio-n.com

code injection

root of trust

device integrity

load-time validation

physical access

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.