2187
Insert restrictions on when the hardware's test or debug features can be activated. For example,
during normal operating modes, the hardware's privileged modes that allow access to such
features cannot be activated. Configuring the hardware to only enter a test or debug mode within
a window of opportunity such as during boot or configuration stage. The result is disablement of
such test/debug features and associated modes during normal runtime operations.
Phase: Implementation
Insert restrictions on when the hardware's test or debug features can be activated. For example,
during normal operating modes, the hardware's privileged modes that allow access to such
features cannot be activated. Configuring the hardware to only enter a test or debug mode within
a window of opportunity such as during boot or configuration stage. The result is disablement of
such test/debug features and associated modes during normal runtime operations.
Phase: Integration
Insert restrictions on when the hardware's test or debug features can be activated. For example,
during normal operating modes, the hardware's privileged modes that allow access to such
features cannot be activated. Configuring the hardware to only enter a test or debug mode within
a window of opportunity such as during boot or configuration stage. The result is disablement of
such test/debug features and associated modes during normal runtime operations.
Observed Examples
Reference Description
CVE-2021-33150 Hardware processor allows activation of test or debug logic at runtime.
https://www.cve.org/CVERecord?id=CVE-2021-33150
CVE-2021-0146 Processor allows the activation of test or debug logic at runtime, allowing
escalation of privileges
https://www.cve.org/CVERecord?id=CVE-2021-0146
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1207 Debug and Test Problems 1194 2474
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
121 Exploit Non-Production Interfaces
CWE-1314: Missing Write Protection for Parametric Data Values
Weakness ID : 1314
Structure : Simple
Abstraction : Base
Description
The device does not write-protect the parametric data values for sensors that scale the sensor
value, allowing untrusted software to manipulate the apparent result and potentially damage
hardware or cause operational failure.
Extended Description
Various sensors are used by hardware to detect any devices operating outside of the design limits.
The threshold limit values are set by hardware fuses or trusted software such as the BIOS. These
CWE Version 4.14
CWE-1314: Missing Write Protection for Parametric Data Values
CWE-1314: Missing Write Protection for Parametric Data Values