CWEweakness

CWE-1276 Hardware Child Block Incorrectly Connected to Parent System

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

Signals between a hardware IP and the parent system design are incorrectly connected.

Common consequences

• Confidentiality, Integrity, Availability: Varies by Context — This may cause security risks. For example, if the IP should only be reset by a system-wide hard reset, but instead the reset input is connected to a software-triggered debug mode reset (which is also asserted during a hard reset), integrity of data inside the IP can be violated.

Potential mitigations

• [Testing] System-level verification may be used to ensure that components are correctly connected and that design security requirements are not violated due to interactions between various IP blocks.

Related

Child of · CWE (1)

  • CWE-284 Improper Access Control weakness

Referenced by CVE · weakness (1)

  • CVE-2026-77251 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). vulnerability