CWE-1234 Hardware Internal or Debug Modes Allow Override of Locks

System configuration protection may be bypassed during debug mode.

• Access Control: Bypass Protection Mechanism — Bypass of the lock bit protection may allow access and modification of system configuration information, even when the lock bit is set.

• [Architecture and Design, Implementation, Testing] • Security Lock bit protections should be reviewed for any bypass/override modes supported. • Any supported override modes either should be removed or protected using authenticated debug modes. • Security lock programming flow and lock properties should be tested in pre-silicon and post-silicon testing.