2470
Category-1197: Integration Issues
Category ID : 1197
Summary
Weaknesses in this category are those that arise due to integration of multiple hardware Intellectual
Property (IP) cores, from System-on-a-Chip (SoC) subsystem interactions, or from hardware
platform subsystem interactions.
Membership
Nature Type ID Name Page
MemberOf 1194 Hardware Design 1194 2586
HasMember 1276 Hardware Child Block Incorrectly Connected to Parent
System
1194 2113
Category-1198: Privilege Separation and Access Control Issues
Category ID : 1198
Summary
Weaknesses in this category are related to features and mechanisms providing hardware-based
isolation and access control (e.g., identity, policy, locking control) of sensitive shared hardware
resources such as registers and fuses.
Membership
Nature Type ID Name Page
MemberOf 1194 Hardware Design 1194 2586
MemberOf 1372 ICS Supply Chain: OT Counterfeit and Malicious
Corruption
1358 2509
HasMember 276 Incorrect Default Permissions 1194 665
HasMember 441 Unintended Proxy or Intermediary ('Confused Deputy') 1194 1064
HasMember 1189 Improper Isolation of Shared Resources on System-ona-
Chip (SoC)
1194 1976
HasMember 1192 Improper Identifier for IP Block used in System-On-Chip
(SOC)
1194 1985
HasMember 1220 Insufficient Granularity of Access Control 1194 1992
HasMember 1222 Insufficient Granularity of Address Regions Protected by
Register Locks
1194 1999
HasMember 1242 Inclusion of Undocumented Features or Chicken Bits 1194 2033
HasMember 1260 Improper Handling of Overlap Between Protected
Memory Ranges
1194 2075
HasMember 1262 Improper Access Control for Register Interface 1194 2081
HasMember 1267 Policy Uses Obsolete Encoding 1194 2093
HasMember 1268 Policy Privileges are not Assigned Consistently
Between Control and Data Agents
1194 2095
HasMember 1280 Access Control Check Implemented After Asset is
Accessed
1194 2122
HasMember 1294 Insecure Security Identifier Mechanism 1194 2150
HasMember 1299 Missing Protection Mechanism for Alternate Hardware
Interface
1194 2162
HasMember 1302 Missing Source Identifier in Entity Transactions on a
System-On-Chip (SOC)
1194 2172
CWE Version 4.14
CWE-1199: General Circuit and Logic Design Concerns
CWE-1199: General Circuit and Logic Design Concerns