2182
CWE-1311: Improper Translation of Security Attributes by Fabric Bridge
Weakness ID : 1311
Structure : Simple
Abstraction : Base
Description
The bridge incorrectly translates security attributes from either trusted to untrusted or from
untrusted to trusted when converting from one fabric protocol to another.
Extended Description
A bridge allows IP blocks supporting different fabric protocols to be integrated into the system.
Fabric end-points or interfaces usually have dedicated signals to transport security attributes. For
example, HPROT signals in AHB, AxPROT signals in AXI, and MReqInfo and SRespInfo signals in
OCP.
The values on these signals are used to indicate the security attributes of the transaction. These
include the immutable hardware identity of the controller initiating the transaction, privilege level,
and type of transaction (e.g., read/write, cacheable/non-cacheable, posted/non-posted).
A weakness can arise if the bridge IP block, which translates the signals from the protocol used
in the IP block endpoint to the protocol used by the central bus, does not properly translate the
security attributes. As a result, the identity of the initiator could be translated from untrusted to
trusted or vice-versa. This could result in access-control bypass, privilege escalation, or denial of
service.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
Applicable Platforms
Language : Verilog (Prevalence = Undetermined)
Language : VHDL (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Access Control
Modify Memory
Read Memory
Gain Privileges or Assume Identity
Bypass Protection Mechanism
Execute Unauthorized Code or Commands
Potential Mitigations
Phase: Architecture and Design
The translation must map signals in such a way that untrusted agents cannot map to trusted
agents or vice-versa.
Phase: Implementation
CWE Version 4.14
CWE-1311: Improper Translation of Security Attributes by Fabric Bridge
CWE-1311: Improper Translation of Security Attributes by Fabric Bridge