CWEweakness
CWE-1276 Hardware Child Block Incorrectly Connected to Parent System
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
Signals between a hardware IP and the parent system design are incorrectly connected.
Common consequences
• Confidentiality, Integrity, Availability: Varies by Context — This may cause security risks. For example, if the IP should only be reset by a system-wide hard reset, but instead the reset input is connected to a software-triggered debug mode reset (which is also asserted during a hard reset), integrity of data inside the IP can be violated.
Potential mitigations
• [Testing] System-level verification may be used to ensure that components are correctly connected and that design security requirements are not violated due to interactions between various IP blocks.
Related
Child of · CWE (1)
- CWE-284 Improper Access Control weakness
Referenced by CVE · weakness (1)
- CVE-2026-77251 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). vulnerability