CWEweakness

CWE-1283 Mutable Attestation or Measurement Reporting Data

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The register contents used for attestation or measurement reporting data to verify boot flow are modifiable by an adversary.

Common consequences

• Integrity: Modify Memory, Modify Application Data — An adversary could spoof the measurement.

Potential mitigations

• [Architecture and Design] Measurement data should be stored in registers that are read-only or otherwise have access controls that prevent modification by an untrusted agent.

Related

Attack pattern · CAPEC (1)

  • CAPEC-680 Exploitation of Improperly Controlled Registers attack pattern

Child of · CWE (1)

  • CWE-284 Improper Access Control weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-680 Exploitation of Improperly Controlled Registers attack pattern

Referenced by CVE · weakness (3)

  • CVE-2024-29038 tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. vulnerability
  • CVE-2023-3674 A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's… vulnerability
  • CVE-2022-1740 The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application… vulnerability