2230
• add additional execution sensing circuits to monitor the execution order for anomalies and abort the action or reset
the device under fault conditions
Observed Examples
Reference Description
CVE-2019-15894 fault injection attack bypasses the verification mode, potentially allowing
arbitrary code execution.
https://www.cve.org/CVERecord?id=CVE-2019-15894
Functional Areas
• Power
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1206 Power, Clock, Thermal, and Reset Concerns 1194 2473
MemberOf 1365 ICS Communications: Unreliability 1358 2502
MemberOf 1388 Physical Access Issues and Concerns 1194 2518
MemberOf 1405 Comprehensive Categorization: Improper Check or
Handling of Exceptional Conditions
1400 2531
Related Attack Patterns
CAPEC-ID Attack Pattern Name
624 Hardware Fault Injection
625 Mobile Device Fault Injection
References
[REF-1161]Josep Balasch, Benedikt Gierlichs and Ingrid Verbauwhede. "An In-depth and Blackbox
Characterization of the Effects of Clock Glitches on 8-bit MCUs". 2011 Workshop on Fault
Diagnosis and Tolerance in Cryptography (IEEE). 2011 September. < https://ieeexplore.ieee.org/
document/6076473 >.
[REF-1222]Alexandre Menu, Jean-Max Dutertre, Olivier Potin and Jean-Baptiste Rigaud.
"Experimental Analysis of the Electromagnetic Instruction Skip Fault Model". IEEE Xplore. 2020
April 0. < https://ieeexplore.ieee.org/document/9081261 >.
[REF-1223]Niek Timmers, Albert Spruyt and Marc Witteman. "Controlling PC on ARM using Fault
Injection". 2016 June 1. < https://fdtc.deib.polimi.it/FDTC16/shared/FDTC-2016-session_2_1.pdf
>.2023-04-07.
[REF-1224]Colin O'Flynn. "Attacking USB Gear with EMFI". Circuit Cellar. 2019 May. < https://
www.totalphase.com/media/pdf/whitepapers/Circuit_Cellar_TP.pdf >.
[REF-1286]Lennert Wouters, Benedikt Gierlichs and Bart Preneel. "On The Susceptibility of Texas
Instruments SimpleLink Platform Microcontrollers to Non-Invasive Physical Attacks". 2022 March 4.
< https://eprint.iacr.org/2022/328.pdf >.
CWE-1333: Inefficient Regular Expression Complexity
Weakness ID : 1333
Structure : Simple
Abstraction : Base
Description
CWE Version 4.14
CWE-1333: Inefficient Regular Expression Complexity
CWE-1333: Inefficient Regular Expression Complexity