2198
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 693 Protection Mechanism Failure 1520
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Processor Hardware (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Access Control
Availability
DoS: Crash, Exit, or Restart
Read Memory
Modify Memory
Medium
Detection Methods
Architecture or Design Review
Review the fabric specification and ensure that it contains signals to transfer security-sensitive
signals.
Effectiveness = High
Manual Static Analysis - Source Code
Lack of security features can also be confirmed through manual RTL review of the fabric RTL.
Effectiveness = High
Potential Mitigations
Phase: Architecture and Design
If fabric does not support security features, implement security checks in a bridge or any
component that is between the master and the fabric. Alternatively, connect all fabric slaves that
do not have any security assets under one such fabric and connect peripherals with security
assets to a different fabric that supports security features.
Demonstrative Examples
Example 1:
Several systems on chips (SoCs) use the Advanced-Microcontroller Bus Architecture (AMBA)
Advanced-Peripheral Bus (APB) protocol. APB is a simple, low-power bus and uses the
PPROT[2:0] bits to indicate the security state of the bus masters ;PPROT[0] indicates privilege,
PPROT[1] indicates secure/non-secure transaction, and PPROT[2] indicates instruction/data.
Assume that there is no fabric bridge in the SoC. One of the slaves, the power-management unit,
contains registers that store the thermal-shutdown limits.
The APB bus is used to connect several bus masters, each with a unique and immutable hardware
identity, to several slaves. For a CPU supporting 8 potential identities (each with varying privilege
CWE Version 4.14
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)