2172
Relevant to the view "Hardware Design" (CWE-1194)
Nature Type ID Name Page
ParentOf 1259 Improper Restriction of Security Token Assignment 2073
ParentOf 1270 Generation of Incorrect Security Tokens 2100
ParentOf 1290 Incorrect Decoding of Security Identifiers 2142
ParentOf 1292 Incorrect Conversion of Security Identifiers 2147
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Bus/Interface Hardware (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Access Control
Modify Memory
Read Memory
DoS: Resource Consumption (Other)
Execute Unauthorized Code or Commands
Gain Privileges or Assume Identity
Quality Degradation
High
Potential Mitigations
Phase: Architecture and Design
Security Identifier Decoders must be reviewed for design inconsistency and common
weaknesses.
Phase: Implementation
Access and programming flows must be tested in pre-silicon and post-silicon testing.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1198 Privilege Separation and Access Control Issues 1194 2470
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
121 Exploit Non-Production Interfaces
CWE Version 4.14
CWE-1295: Debug Messages Revealing Unnecessary Information
CWE-1295: Debug Messages Revealing Unnecessary Information