2058
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1201 Core and Compute Issues 1194 2471
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
679 Exploitation of Improperly Configured or Implemented Memory Protections
References
[REF-1076]ARM. "Cortex-R4 Manual". < https://developer.arm.com/Processors/Cortex-M4
>.2023-04-07.
[REF-1077]Intel. "MCS 51 Microcontroller Family User's Manual". < http://web.mit.edu/6.115/www/
document/8051.pdf >.
[REF-1078]ARM. "Memory Protection Unit (MPU)". < https://web.archive.org/
web/20200630034848/https://static.docs.arm.com/100699/0100/
armv8m_architecture_memory_protection_unit_100699_0100_00_en.pdf >.2023-04-07.
CWE-1253: Incorrect Selection of Fuse Values
Weakness ID : 1253
Structure : Simple
Abstraction : Base
Description
The logic level used to set a system to a secure state relies on a fuse being unblown. An attacker
can set the system to an insecure state merely by blowing the fuse.
Extended Description
Fuses are often used to store secret data, including security configuration data. When not blown,
a fuse is considered to store a logic 0, and, when blown, it indicates a logic 1. Fuses are generally
considered to be one-directional, i.e., once blown to logic 1, it cannot be reset to logic 0. However,
if the logic used to determine system-security state (by leveraging the values sensed from the
fuses) uses negative logic, an attacker might blow the fuse and drive the system to an insecure
state.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 693 Protection Mechanism Failure 1520
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
CWE Version 4.14
CWE-1253: Incorrect Selection of Fuse Values
CWE-1253: Incorrect Selection of Fuse Values