Weakness (CWE)

CWE-1190: DMA Device Enabled Too Early in Boot Phase

Base Draft

The product enables a Direct Memory Access (DMA) capable device before the security configuration settings are established, which allows an attacker to extract data from or gain privileges on the product.

More detail

Several virtualization-based mitigations have been introduced to thwart DMA attacks. These are usually
configured/setup during boot time. However, certain IPs that are
powered up before boot is complete (known as early boot IPs) may
be DMA capable. Such IPs, if not trusted, could launch DMA
attacks and gain access to assets that should otherwise be
protected.

How to prevent it (1 mitigation)

Architecture and Design

Utilize an IOMMU to orchestrate IO access from
the start of the boot process.

Source: MITRE CWE-1190

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.