2059
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control
Authorization
Bypass Protection Mechanism
Gain Privileges or Assume Identity
Availability DoS: Crash, Exit, or Restart
Confidentiality Read Memory
Integrity Modify Memory
Execute Unauthorized Code or Commands
Potential Mitigations
Phase: Architecture and Design
Logic should be designed in a way that blown fuses do not put the product into an insecure state
that can be leveraged by an attacker.
Demonstrative Examples
Example 1:
A chip implements a secure boot and uses the sensed value of a fuse "do_secure_boot" to
determine whether to perform a secure boot or not. If this fuse value is "0", the system performs
secure boot. Otherwise, it does not perform secure boot.
An attacker blows the "do_secure_boot" fuse to "1". After reset, the attacker loads a custom
bootloader, and, since the fuse value is now "1", the system does not perform secure boot, and the
attacker can execute their custom firmware image.
Since by default, a fuse-configuration value is a "0", an attacker can blow it to a "1" with
inexpensive hardware.
If the logic is reversed, an attacker cannot easily reset the fuse. Note that, with specialized and
expensive equipment, an attacker with full physical access might be able to "unblow" the fuse value
to a "0".
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1199 General Circuit and Logic Design Concerns 1194 2471
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
74 Manipulating State
References
CWE Version 4.14
CWE-1254: Incorrect Comparison Logic Granularity
CWE-1254: Incorrect Comparison Logic Granularity