CWE-1294 Insecure Security Identifier Mechanism

The System-on-Chip (SoC) implements a Security Identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Identifiers are not correctly implemented.

• Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Quality Degradation

• [Architecture and Design] Security Identifier Decoders must be reviewed for design inconsistency and common weaknesses. • [Implementation] Access and programming flows must be tested in pre-silicon and post-silicon testing.