2105
Nature Type ID Name Page
CanPrecede 200 Exposure of Sensitive Information to an Unauthorized Actor 504
Weakness Ordinalities
Primary :
Applicable Platforms
Language : VHDL (Prevalence = Undetermined)
Language : Verilog (Prevalence = Undetermined)
Language : Hardware Description Language (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Access Control
Accountability
Authentication
Authorization
Non-Repudiation
Read Memory
Read Application Data
Sensitive information may be used to unlock additional
capabilities of the device and take advantage of hidden
functionalities which could be used to compromise device
security.
High
Detection Methods
Manual Analysis
Write a known pattern into each sensitive location. Enter the power/debug state in question.
Read data back from the sensitive locations. If the reads are successful, and the data is the
same as the pattern that was originally written, the test fails and the device needs to be fixed.
Note that this test can likely be automated.
Effectiveness = High
Potential Mitigations
Phase: Architecture and Design
Phase: Implementation
During state transitions, information not needed in the next state should be removed before the
transition to the next state.
Demonstrative Examples
Example 1:
This example shows how an attacker can take advantage of an incorrect state transition.
Suppose a device is transitioning from state A to state B. During state A, it can read certain private
keys from the hidden fuses that are only accessible in state A but not in state B. The device reads
the keys, performs operations using those keys, then transitions to state B, where those private
keys should no longer be accessible.
Example Language: (Bad)
During the transition from A to B, the device does not scrub the memory.
CWE Version 4.14
CWE-1273: Device Unlock Credential Sharing
CWE-1273: Device Unlock Credential Sharing