1978
Nature Type ID Name Page
MemberOf 1198 Privilege Separation and Access Control Issues 1194 2470
MemberOf 1343 Weaknesses in the 2021 CWE Most Important
Hardware Weaknesses List
1343 2592
MemberOf 1364 ICS Communications: Zone Boundary Failures 1358 2501
MemberOf 1366 ICS Communications: Frail Security in Protocols 1358 2503
MemberOf 1418 Comprehensive Categorization: Violation of Secure
Design Principles
1400 2549
Related Attack Patterns
CAPEC-ID Attack Pattern Name
124 Shared Resource Manipulation
References
[REF-1036]Ali Abbasi and Majid Hashemi. "Ghost in the PLC Designing an Undetectable
Programmable Logic Controller Rootkit via Pin Control Attack". 2016. < https://www.blackhat.com/
docs/eu-16/materials/eu-16-Abbasi-Ghost-In-The-PLC-Designing-An-Undetectable-Programmable-
Logic-Controller-Rootkit-wp.pdf >.
[REF-1138]Stewart Smith. "CVE-2019-6260: Gaining control of BMC from the host processor".
2019. < https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260:-gaining-control-of-bmcfrom-
the-host-processor/ >.
CWE-1190: DMA Device Enabled Too Early in Boot Phase
Weakness ID : 1190
Structure : Simple
Abstraction : Base
Description
The product enables a Direct Memory Access (DMA) capable device before the security
configuration settings are established, which allows an attacker to extract data from or gain
privileges on the product.
Extended Description
DMA is included in a number of devices because it allows data transfer between the computer
and the connected device, using direct hardware access to read or write directly to main memory
without any OS interaction. An attacker could exploit this to access secrets. Several virtualizationbased
mitigations have been introduced to thwart DMA attacks. These are usually configured/setup
during boot time. However, certain IPs that are powered up before boot is complete (known as
early boot IPs) may be DMA capable. Such IPs, if not trusted, could launch DMA attacks and gain
access to assets that should otherwise be protected.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 696 Incorrect Behavior Order 1527
Applicable Platforms
CWE Version 4.14
CWE-1190: DMA Device Enabled Too Early in Boot Phase
CWE-1190: DMA Device Enabled Too Early in Boot Phase