CWEweakness

CWE-1193 Power-On of Untrusted Execution Core Before Enabling Fabric Access Control

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product enables components that contain untrusted firmware before memory and fabric access controls have been enabled.

Common consequences

• Access Control: Bypass Protection Mechanism — If untrusted IPs or peripheral microcontrollers are enabled too soon, then the untrusted component can master transactions on the hardware bus and target memory or other assets to compromise the SoC boot firmware.

Potential mitigations

• [Architecture and Design] The boot sequence should enable fabric access controls and memory protections before enabling third-party hardware IPs and peripheral microcontrollers that use untrusted firmware.

Related

Attack pattern · CAPEC (2)

  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs attack pattern
  • CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels attack pattern

Child of · CWE (1)

  • CWE-696 Incorrect Behavior Order weakness

Referenced by CAPEC · weakness (2)

  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs attack pattern
  • CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels attack pattern