2010
Example Language: Verilog (Good)
always @(posedge clk_i)
begin
if(~(rst_ni && ~jtag_unlock))
begin
for (j=0; j < 6; j=j+1) begin
reglk_mem[j] <= 'h0;
end
end
...
Observed Examples
Reference Description
CVE-2017-6283 chip reset clears critical read/write lock permissions for RSA function
https://www.cve.org/CVERecord?id=CVE-2017-6283
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1199 General Circuit and Logic Design Concerns 1194 2471
MemberOf 1343 Weaknesses in the 2021 CWE Most Important
Hardware Weaknesses List
1343 2592
MemberOf 1372 ICS Supply Chain: OT Counterfeit and Malicious
Corruption
1358 2509
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
680 Exploitation of Improperly Controlled Registers
References
[REF-1350]"reglk_wrapper.sv". 2021. < https://github.com/HACK-EVENT/hackatdac21/
blob/b9ecdf6068445d76d6bee692d163fededf7a9d9b/piton/design/chip/tile/ariane/src/reglk/
reglk_wrapper.sv#L80C1-L80C48 >.2023-09-18.
[REF-1351]"fix cwe 1199 in reglk". 2023. < https://github.com/HACK-EVENT/hackatdac21/
commit/5928add42895b57341ae8fc1f9b8351c35aed865#diff-1c2b09dd092a56e5fb2be431a3849e72ff489d2ae4f4a6bb9c0ea6b7d450135aR80
>.2023-09-18.
CWE-1232: Improper Lock Behavior After Power State Transition
Weakness ID : 1232
Structure : Simple
Abstraction : Base
Description
Register lock bit protection disables changes to system configuration once the bit is set. Some of
the protected registers or lock bits become programmable after power state transitions (e.g., Entry
and wake from low power sleep modes) causing the system configuration to be changeable.
Extended Description
Devices may allow device configuration controls which need to be programmed after device power
reset via a trusted firmware or software module (commonly set by BIOS/bootloader) and then
CWE Version 4.14
CWE-1232: Improper Lock Behavior After Power State Transition
CWE-1232: Improper Lock Behavior After Power State Transition