2222
);
...
always_ff @(posedge tck_i or negedge trst_ni) begin
...
if (hmac_patch_en)
hmac_key_reg <= hmac_key_i;
...
end
...
hmac hmac(
...
.key_i(hmac_key_reg),
...
);
...
endmodule
Observed Examples
Reference Description
CVE-2020-9054 Chain: network-attached storage (NAS) device has a critical OS command
injection (CWE-78) vulnerability that is actively exploited to place IoT devices
into a botnet, but some products are "end-of-support" and cannot be patched
(CWE-1277). [REF-1097]
https://www.cve.org/CVERecord?id=CVE-2020-9054
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1208 Cross-Cutting Problems 1194 2474
MemberOf 1368 ICS Dependencies (& Architecture): External Digital
Systems
1358 2505
MemberOf 1415 Comprehensive Categorization: Resource Control 1400 2544
References
[REF-1197]Health Care Industry Cybersecurity Task Force. "Report on Improving Cybersecurity
in the Health Care Industry". 2017 June. < https://www.phe.gov/Preparedness/planning/CyberTF/
Documents/report2017.pdf >.
[REF-1097]Brian Krebs. "Zyxel Flaw Powers New Mirai IoT Botnet Strain". 2020 March 0. < https://
krebsonsecurity.com/2020/03/zxyel-flaw-powers-new-mirai-iot-botnet-strain/ >.
[REF-1387]"dmi_jtag.sv line 324". 2021. < https://github.com/HACK-EVENT/hackatdac21/blob/
main/piton/design/chip/tile/ariane/src/riscv-dbg/src/dmi_jtag.sv#L324C9-L324C87 >.2024-01-16.
[REF-1388]"Fix for dmi_jtag.sv". 2021. < https://github.com/HACK-EVENT/hackatdac21/commit/
c94ce5f9487a41c77ede0bbc8daf4da66c39f42a >.2024-01-16.
CWE-1330: Remanent Data Readable after Memory Erase
Weakness ID : 1330
Structure : Simple
Abstraction : Variant
Description
Confidential information stored in memory circuits is readable or recoverable after being cleared or
erased.
CWE Version 4.14
CWE-1330: Remanent Data Readable after Memory Erase
CWE-1330: Remanent Data Readable after Memory Erase