Some devices utilize bootloaders that are either stored in writable memory or memory that can be made writable. It may then be possible for a threat actor to alter the contents of the device’s designated boot code storage locations to inject malicious code or modify the bootloader’s operation. This could allow the installation of a “bootkit”, which is loaded before the operating system and can undermine any security protections within the bootloader or operating system. Typically, this is done through a vulnerability or lack of write protections in the bootloader loader/runtime environment.

• CWE-693: Protection Mechanisms Failure (Pillar)
• CWE-284: Improper Access Control