2124
Nature Type ID Name Page
MemberOf 1198 Privilege Separation and Access Control Issues 1194 2470
MemberOf 1410 Comprehensive Categorization: Insufficient Control
Flow Management
1400 2536
Related Attack Patterns
CAPEC-ID Attack Pattern Name
180 Exploiting Incorrectly Configured Access Control Security Levels
CWE-1281: Sequence of Processor Instructions Leads to Unexpected
Behavior
Weakness ID : 1281
Structure : Simple
Abstraction : Base
Description
Specific combinations of processor instructions lead to undesirable behavior such as locking the
processor until a hard reset performed.
Extended Description
If the instruction set architecture (ISA) and processor logic are not designed carefully and tested
thoroughly, certain combinations of instructions may lead to locking the processor or other
unexpected and undesirable behavior. Upon encountering unimplemented instruction opcodes
or illegal instruction operands, the processor should throw an exception and carry on without
negatively impacting security. However, specific combinations of legal and illegal instructions may
cause unexpected behavior with security implications such as allowing unprivileged programs to
completely lock the CPU.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 691 Insufficient Control Flow Management 1517
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Technology : Processor Hardware (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity
Availability
Varies by Context
Potential Mitigations
CWE Version 4.14
CWE-1281: Sequence of Processor Instructions Leads to Unexpected Behavior
CWE-1281: Sequence of Processor Instructions Leads to Unexpected Behavior