CWEweakness
CWE-1192 Improper Identifier for IP Block used in System-On-Chip (SOC)
- Abstraction
- Base
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The System-on-Chip (SoC) does not have unique, immutable identifiers for each of its components.
Common consequences
• Access Control: Bypass Protection Mechanism
Potential mitigations
• [Architecture and Design] Every identity generated in the SoC should be unique and
immutable in hardware. The actions that an IP is trusted or
not trusted should be clearly defined, implemented,
configured, and tested. If the definition is implemented via a
policy, then the policy should be immutable or protected with
clear authentication and authorization.
Related
Attack pattern · CAPEC (1)
- CAPEC-113 Interface Manipulation attack pattern
Child of · CWE (1)
- CWE-657 Violation of Secure Design Principles weakness
Referenced by CAPEC · weakness (1)
- CAPEC-113 Interface Manipulation attack pattern