Weakness (CWE)
CWE-1221: Incorrect Register Defaults or Module Parameters
Hardware description language code incorrectly defines register defaults or hardware Intellectual Property (IP) parameters to insecure values.
How to prevent it (2 mitigations)
-
Architecture and Design
During hardware design, all the system parameters and register defaults must be reviewed to identify security sensitive settings.
-
Implementation
The default values of these security sensitive settings need to be defined as part of the design review phase.
Source: MITRE CWE-1221
2 results · Clear filters · Feed
-
Medium 4.6
Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities
Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent …
-
Medium 4.6
Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities
Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent …