1980
PeerOf 1314 Missing Write Protection for Parametric Data Values 2187
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Microcontroller Hardware (Prevalence = Undetermined)
Technology : Processor Hardware (Prevalence = Undetermined)
Technology : Bus/Interface Hardware (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Access Control
Modify Memory
Read Memory
DoS: Resource Consumption (Other)
Execute Unauthorized Code or Commands
Gain Privileges or Assume Identity
Alter Execution Logic
Bypass Protection Mechanism
Quality Degradation
High
Potential Mitigations
Phase: Requirements
Protect assets from accesses against all potential interfaces and alternate paths.
Effectiveness = Defense in Depth
Phase: Architecture and Design
Protect assets from accesses against all potential interfaces and alternate paths.
Effectiveness = Defense in Depth
Phase: Implementation
Protect assets from accesses against all potential interfaces and alternate paths.
Effectiveness = Defense in Depth
Demonstrative Examples
Example 1:
CWE Version 4.14
CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface
CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface