Weakness (CWE)
CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
The System-On-a-Chip (SoC) does not properly isolate shared resources between trusted and untrusted agents.
More detail
A System-On-a-Chip (SoC) has a lot of functionality, but it may have a limited number of pins or pads. A pin can only perform one function at a time. However, it can be configured to perform multiple different functions. This technique is called pin multiplexing. Similarly, several resources on the chip may be shared to multiplex and support different features or functions. When such resources are shared between trusted and untrusted agents, untrusted agents may be able to access the assets intended to be accessed only by the trusted agents.
How to prevent it (1 mitigation)
-
Architecture and Design
When sharing resources, avoid mixing agents of varying trust levels.
Untrusted agents should not share resources with trusted agents.
Source: MITRE CWE-1189
5 results · Clear filters · Feed
-
High 8.7
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF connt…
-
High 7.3
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker t…
-
High 7.2
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the content…
-
High 7.8
Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to p…
-
High 7.8
Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially en…