2184
Nature Type ID Name Page
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
1 Accessing Functionality Not Properly Constrained by ACLs
180 Exploiting Incorrectly Configured Access Control Security Levels
233 Privilege Escalation
CWE-1312: Missing Protection for Mirrored Regions in On-Chip Fabric Firewall
Weakness ID : 1312
Structure : Simple
Abstraction : Base
Description
The firewall in an on-chip fabric protects the main addressed region, but it does not protect any
mirrored memory or memory-mapped-IO (MMIO) regions.
Extended Description
Few fabrics mirror memory and address ranges, where mirrored regions contain copies of the
original data. This redundancy is used to achieve fault tolerance. Whatever protections the fabric
firewall implements for the original region should also apply to the mirrored regions. If not, an
attacker could bypass existing read/write protections by reading from/writing to the mirrored regions
to leak or corrupt the original data.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
Relevant to the view "Hardware Design" (CWE-1194)
Nature Type ID Name Page
PeerOf 1251 Mirrored Regions with Different Values 2054
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Access Control
Modify Memory
Read Memory
Bypass Protection Mechanism
Detection Methods
CWE Version 4.14
CWE-1313: Hardware Allows Activation of Test or Debug Logic at Runtime
CWE-1313: Hardware Allows Activation of Test or Debug Logic at Runtime