2200
Weakness ID : 1319
Structure : Simple
Abstraction : Base
Description
The device is susceptible to electromagnetic fault injection attacks, causing device internal
information to be compromised or security mechanisms to be bypassed.
Extended Description
Electromagnetic fault injection may allow an attacker to locally and dynamically modify the signals
(both internal and external) of an integrated circuit. EM-FI attacks consist of producing a local,
transient magnetic field near the device, inducing current in the device wires. A typical EMFI
setup is made up of a pulse injection circuit that generates a high current transient in an EMI coil,
producing an abrupt magnetic pulse which couples to the target producing faults in the device,
which can lead to:
• Bypassing security mechanisms such as secure JTAG or Secure Boot
• Leaking device information
• Modifying program flow
• Perturbing secure hardware modules (e.g. random number generators)
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 693 Protection Mechanism Failure 1520
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : System on Chip (Prevalence = Undetermined)
Technology : Microcontroller Hardware (Prevalence = Undetermined)
Technology : Memory Hardware (Prevalence = Undetermined)
Technology : Power Management Hardware (Prevalence = Undetermined)
Technology : Processor Hardware (Prevalence = Undetermined)
Technology : Test/Debug Hardware (Prevalence = Undetermined)
Technology : Sensor Hardware (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Access Control
Availability
Modify Memory
Read Memory
Gain Privileges or Assume Identity
Bypass Protection Mechanism
Execute Unauthorized Code or Commands
CWE Version 4.14
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)