CWEweakness
CWE-1292 Incorrect Conversion of Security Identifiers
- Abstraction
- Base
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product implements a conversion mechanism to map certain bus-transaction signals to security identifiers, but this conversion between protocols is incorrectly implemented.
Common consequences
• Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Quality Degradation — An untrusted agent may gain unauthorized access to an asset
Potential mitigations
• [Architecture and Design] Security identifier decoders must be reviewed for design inconsistency and common weaknesses.
• [Implementation] Access and programming flows must be tested in pre-silicon and post-silicon testing.
Related
Child of · CWE (1)
- CWE-1294 Insecure Security Identifier Mechanism weakness