CWE-1301

Insufficient or Incomplete Data Removal within Hardware Component

Medium

Description

The product's data removal process does not completely delete all data and potentially sensitive information within hardware components.

Potential Impact

How to Fix

Architecture and Design

Apply blinding or masking techniques to implementations of cryptographic algorithms.

Implementation

Alter the method of erasure, add protection of media, or destroy the media to protect the data.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1301 vulnerabilities in your codebase.

Get Security Assessment