354 – Prevent firmware downgrades

Summary

Devices should have mechanisms that protect their firmware (anti-rollback) from being downgraded.

Description

Attackers may attempt to exploit vulnerabilities in older firmware versions that have been patched in newer releases. Anti-rollback features help to mitigate the risk of exploitation by preventing the installation of outdated and insecure firmware.

Supported In

Advanced: True

References

• CWE-693. Protection mechanism failure
• AGILE-3. Deliver working software frequently
• MITRE-M1033. Limit software installation
• NIST800171-1_18. Control connection of mobile devices
• C2M2-9_3_l. Implement IT and OT asset security for cybersecurity architecture

Last updated

2024/01/18