CWE-1384 Improper Handling of Physical or Environmental Conditions

The product does not properly handle unexpected physical or environmental conditions that occur naturally or are artificially induced.

• Confidentiality, Integrity, Availability: Varies by Context, Unexpected State — Consequences of this weakness are highly dependent on the role of affected components within the larger product.

• [Requirements] In requirements, be specific about expectations for how the product will perform when it exceeds physical and environmental boundary conditions, e.g., by shutting down. • [Architecture and Design, Implementation] Where possible, include independent components that can detect excess environmental conditions and have the capability to shut down the product. • [Architecture and Design, Implementation] Where possible, use shielding or other materials that can increase the adversary's workload and reduce the likelihood of being able to successfully trigger a security-related failure.

• CVE-2019-17391: Lack of anti-glitch protections allows an attacker to launch a physical attack to bypass the secure boot and read protected eFuses.