CWEweakness

CWE-1192 Improper Identifier for IP Block used in System-On-Chip (SOC)

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The System-on-Chip (SoC) does not have unique, immutable identifiers for each of its components.

Common consequences

• Access Control: Bypass Protection Mechanism

Potential mitigations

• [Architecture and Design] Every identity generated in the SoC should be unique and immutable in hardware. The actions that an IP is trusted or not trusted should be clearly defined, implemented, configured, and tested. If the definition is implemented via a policy, then the policy should be immutable or protected with clear authentication and authorization.

Related

Attack pattern · CAPEC (1)

  • CAPEC-113 Interface Manipulation attack pattern

Child of · CWE (1)

  • CWE-657 Violation of Secure Design Principles weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-113 Interface Manipulation attack pattern