CWE-1290 Incorrect Decoding of Security Identifiers

The product implements a decoding mechanism to decode certain bus-transaction signals to security identifiers, but it decodes an untrusted agent's security identifier into a trusted agent's security identifier.

• Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Quality Degradation — If the decoding of an untrusted agent's identifier produces the security identifier of a trusted agent, then the untrusted agent can gain unauthorized access to the asset.

• [Architecture and Design] Security identifier decoders must be reviewed for design consistency and common weaknesses. • [Implementation] Access and programming flows must be tested in pre-silicon and post-silicon testing in order to check for this weakness.