2165
Reference Description
CVE-2017-18293 When GPIO is protected by blocking access to corresponding GPIO resource
registers, protection can be bypassed by writing to the corresponding banked
GPIO registers instead.
https://www.cve.org/CVERecord?id=CVE-2017-18293
CVE-2020-15483 monitor device allows access to physical UART debug port without
authentication
https://www.cve.org/CVERecord?id=CVE-2020-15483
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1198 Privilege Separation and Access Control Issues 1194 2470
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
457 USB Memory Attacks
554 Functionality Bypass
CWE-1300: Improper Protection of Physical Side Channels
Weakness ID : 1300
Structure : Simple
Abstraction : Base
Description
The device does not contain sufficient protection mechanisms to prevent physical side channels
from exposing sensitive information due to patterns in physically observable phenomena such as
variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.
Extended Description
An adversary could monitor and measure physical phenomena to detect patterns and make
inferences, even if it is not possible to extract the information in the digital domain.
Physical side channels have been well-studied for decades in the context of breaking
implementations of cryptographic algorithms or other attacks against security features. These side
channels may be easily observed by an adversary with physical access to the device, or using a
tool that is in close proximity. If the adversary can monitor hardware operation and correlate its data
processing with power, EME, and acoustic measurements, the adversary might be able to recover
of secret keys and data.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 203 Observable Discrepancy 518
CWE Version 4.14
CWE-1300: Improper Protection of Physical Side Channels
CWE-1300: Improper Protection of Physical Side Channels