CWE-1314Base

Missing Write Protection for Parametric Data Values

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
7.7
Median CVSS
What it is

The device does not write-protect the parametric data values for sensors that scale the sensor value, allowing untrusted software to manipulate the apparent result and potentially damage hardware or cause operational failure.

Recent examples
7.7cvss
CVE-2026-40188

goshs is Missing Write Protection for Parametric Data Values

goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, the SFTP command rename sanitizes only the source path and not the destination, so it is possible to write outside of the root directory of the SFTP. This vulnerability is fixed in 2.0.0-beta.4.

HIGHno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-1314
Abstraction
Base
Structure
Simple
Status
Draft
References (1)
https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-tang.pdf