2190
CAPEC-ID Attack Pattern Name
1 Accessing Functionality Not Properly Constrained by ACLs
References
[REF-1082]Adrian Tang, Simha Sethumadhavan and Salvatore Stolfo. "CLKSCREW: Exposing
the Perils of Security-Oblivious Energy Management". < https://www.usenix.org/system/files/
conference/usenixsecurity17/sec17-tang.pdf >.
CWE-1315: Improper Setting of Bus Controlling Capability in Fabric End-point
Weakness ID : 1315
Structure : Simple
Abstraction : Base
Description
The bus controller enables bits in the fabric end-point to allow responder devices to control
transactions on the fabric.
Extended Description
To support reusability, certain fabric interfaces and end points provide a configurable register bit
that allows IP blocks connected to the controller to access other peripherals connected to the
fabric. This allows the end point to be used with devices that function as a controller or responder.
If this bit is set by default in hardware, or if firmware incorrectly sets it later, a device intended to
be a responder on a fabric is now capable of controlling transactions to other devices and might
compromise system security.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control Modify Memory
Read Memory
Bypass Protection Mechanism
Potential Mitigations
Phase: Architecture and Design
For responder devices, the register bit in the fabric end-point that enables the bus controlling
capability must be set to 0 by default. This bit should not be set during secure-boot flows. Also,
CWE Version 4.14
CWE-1315: Improper Setting of Bus Controlling Capability in Fabric End-point
CWE-1315: Improper Setting of Bus Controlling Capability in Fabric End-point