2202
This entry is attack-oriented and may require significant modification in future versions, or even
deprecation. It is not clear whether there is really a design "mistake" that enables such attacks,
so this is not necessarily a weakness and may be more appropriate for CAPEC.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
624 Hardware Fault Injection
625 Mobile Device Fault Injection
References
[REF-1141]Marc Witteman. "Secure Application Programming in the presence of Side Channel
Attacks". 2017. < https://riscureprodstorage.blob.core.windows.net/production/2017/08/
Riscure_Whitepaper_Side_Channel_Patterns.pdf >.2023-04-07.
[REF-1142]A. Dehbaoui, J. M. Dutertre, B. Robisson, P. Orsatelli, P. Maurine, A. Tria. "Injection of
transient faults using electromagnetic pulses. Practical results on a cryptographic system". 2012. <
https://eprint.iacr.org/2012/123.pdf >.
[REF-1143]A. Menu, S. Bhasin, J. M. Dutertre, J. B. Rigaud, J. Danger. "Precise Spatio-
Temporal Electromagnetic Fault Injections on Data Transfers". 2019. < https://hal.telecom-paris.fr/
hal-02338456/document >.
[REF-1144]Colin O'Flynn. "BAM BAM!! On Reliability of EMFI for in-situ Automotive ECU Attacks".
< https://eprint.iacr.org/2020/937.pdf >.
[REF-1145]J. Balasch, D. Arumí, S. Manich. "Design and Validation of a Platform
for Electromagnetic Fault Injection". < https://ieeexplore.ieee.org/stamp/stamp.jsp?
tp=&arnumber=8311630 >.
[REF-1146]M. Gay, B. Karp, O. Keren, I. Polian. "Error control scheme for malicious and
natural faults in cryptographic modules". 2019. < https://link.springer.com/content/pdf/10.1007/
s13389-020-00234-7.pdf >.2023-04-07.
[REF-1147]M. L. Akkar, L. Goubin, O. Ly. "Automatic Integration of Counter-Measures Against
Fault Injection Attacks". < https://www.labri.fr/perso/ly/publications/cfed.pdf >.
[REF-1285]Texas Instruments. "Physical Security Attacks Against Silicon Devices". 2022 January
1. < https://www.ti.com/lit/an/swra739/swra739.pdf?ts=1644234570420 >.
CWE-1320: Improper Protection for Outbound Error Messages and Alert
Signals
Weakness ID : 1320
Structure : Simple
Abstraction : Base
Description
Untrusted agents can disable alerts about signal conditions exceeding limits or the response
mechanism that handles such alerts.
Extended Description
Hardware sensors are used to detect whether a device is operating within design limits. The
threshold values for these limits are set by hardware fuses or trusted software such as a BIOS.
Modification of these limits may be protected by hardware mechanisms.
When device sensors detect out of bound conditions, alert signals may be generated for remedial
action, which may take the form of device shutdown or throttling.
CWE Version 4.14
CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals
CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals