2071
Example Language: Other (Good)
In this design the aliased memory addresses (0x1000 - 0x3FFF) could be blocked from all system software access since
they are not used by software.
Alternately, the MPU logic can be changed to apply the memory protection policies to the full address range mapped to
Unit_A (0x0000 - 0x3FFF).
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1202 Memory and Storage Issues 1194 2472
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
456 Infected Memory
679 Exploitation of Improperly Configured or Implemented Memory Protections
CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug
Information
Weakness ID : 1258
Structure : Simple
Abstraction : Base
Description
The hardware does not fully clear security-sensitive values, such as keys and intermediate values
in cryptographic operations, when debug mode is entered.
Extended Description
Security sensitive values, keys, intermediate steps of cryptographic operations, etc. are stored in
temporary registers in the hardware. If these values are not cleared when debug mode is entered
they may be accessed by a debugger allowing sensitive information to be accessible by untrusted
parties.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 200 Exposure of Sensitive Information to an Unauthorized Actor 504
ChildOf 212 Improper Removal of Sensitive Information Before Storage
or Transfer