Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1191: On-Chip Debug and Test Interface With Improper Access Control

Base

The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.

More detail

If authorization, authentication, or some other form of access control is not implemented or not implemented correctly, a user may be able to bypass on-chip protection mechanisms through the debug interface.

How to prevent it (1 mitigation)

  1. Architecture and Design

    If feasible, the manufacturer should disable the JTAG interface or implement authentication and authorization for the JTAG interface. If authentication logic is added, it should be resistant to timing attacks. Security-sensitive data stored in registers, such as keys, etc. should be cleared when entering debug mode.

Source: MITRE CWE-1191

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.