CWEweakness

CWE-1292 Incorrect Conversion of Security Identifiers

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product implements a conversion mechanism to map certain bus-transaction signals to security identifiers, but this conversion between protocols is incorrectly implemented.

Common consequences

• Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Quality Degradation — An untrusted agent may gain unauthorized access to an asset

Potential mitigations

• [Architecture and Design] Security identifier decoders must be reviewed for design inconsistency and common weaknesses. • [Implementation] Access and programming flows must be tested in pre-silicon and post-silicon testing.

Related

Child of · CWE (1)

  • CWE-1294 Insecure Security Identifier Mechanism weakness