2045
Weakness ID : 1247
Structure : Simple
Abstraction : Base
Description
The device does not contain or contains incorrectly implemented circuitry or sensors to detect and
mitigate voltage and clock glitches and protect sensitive information or software contained on the
device.
Extended Description
A device might support features such as secure boot which are supplemented with hardware and
firmware support. This involves establishing a chain of trust, starting with an immutable root of trust
by checking the signature of the next stage (culminating with the OS and runtime software) against
a golden value before transferring control. The intermediate stages typically set up the system in a
secure state by configuring several access control settings. Similarly, security logic for exercising a
debug or testing interface may be implemented in hardware, firmware, or both. A device needs to
guard against fault attacks such as voltage glitches and clock glitches that an attacker may employ
in an attempt to compromise the system.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1384 Improper Handling of Physical or Environmental Conditions 2257
Relevant to the view "Hardware Design" (CWE-1194)
Nature Type ID Name Page
PeerOf 1332 Improper Handling of Faults that Lead to Instruction Skips 2227
Weakness Ordinalities
Primary :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : ICS/OT (Prevalence = Undetermined)
Technology : System on Chip (Prevalence = Undetermined)
Technology : Power Management Hardware (Prevalence = Undetermined)
Technology : Clock/Counter Hardware (Prevalence = Undetermined)
Technology : Sensor Hardware (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Access Control
Gain Privileges or Assume Identity
Bypass Protection Mechanism
Read Memory
Modify Memory
CWE Version 4.14
CWE-1247: Improper Protection Against Voltage and Clock Glitches
CWE-1247: Improper Protection Against Voltage and Clock Glitches