CWE-1334 Unauthorized Error Injection Can Degrade Hardware Redundancy

An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.

• Integrity, Availability: DoS: Crash, Exit, or Restart, DoS: Instability, Quality Degradation, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other), Reduce Performance, Reduce Reliability, Unexpected State — This redundant block can be prevented from performing as intended if the design allows unauthorized agents to inject errors into it. In this way, a path with injected errors may become unavailable to serve as a redundant channel. This may put the system into a degraded mode of operation which could be exploited by a subsequent attack.

• [Architecture and Design] Ensure the design does not allow error injection in modes intended for normal run-time operation. Provide access controls on interfaces for injecting errors. • [Implementation] Disallow error injection in modes which are expected to be used for normal run-time operation. Provide access controls on interfaces for injecting errors. • [Integration] Add an access control layer atop any unprotected interfaces for injecting errors.