2194
Maintenance
As of CWE 4.6, CWE-1260 and CWE-1316 are siblings under view 1000, but CWE-1260 might
be a parent of CWE-1316. More analysis is warranted.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
456 Infected Memory
679 Exploitation of Improperly Configured or Implemented Memory Protections
References
[REF-1137]Yuriy Bulygin, Oleksandr Bazhaniuk, Andrew Furtak, John Loucaides, Mikhail Gorobets.
"BARing the System - New vulnerabilities in Coreboot & UEFI-based Systems". 2017. < https://
www.c7zero.info/stuff/REConBrussels2017_BARing_the_system.pdf >.
CWE-1317: Improper Access Control in Fabric Bridge
Weakness ID : 1317
Structure : Simple
Abstraction : Base
Description
The product uses a fabric bridge for transactions between two Intellectual Property (IP) blocks, but
the bridge does not properly perform the expected privilege, identity, or other access control checks
between those IP blocks.
Extended Description
In hardware designs, different IP blocks are connected through interconnect-bus fabrics (e.g. AHB
and OCP). Within a System on Chip (SoC), the IP block subsystems could be using different bus
protocols. In such a case, the IP blocks are then linked to the central bus (and to other IP blocks)
through a fabric bridge. Bridges are used as bus-interconnect-routing modules that link different
protocols or separate, different segments of the overall SoC interconnect.
For overall system security, it is important that the access-control privileges associated with
any fabric transaction are consistently maintained and applied, even when they are routed or
translated by a fabric bridge. A bridge that is connected to a fabric without security features
forwards transactions to the slave without checking the privilege level of the master and results in
a weakness in SoC access-control security. The same weakness occurs if a bridge does not check
the hardware identity of the transaction received from the slave interface of the bridge.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
CWE Version 4.14
CWE-1317: Improper Access Control in Fabric Bridge
CWE-1317: Improper Access Control in Fabric Bridge