Weakness (CWE)
CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks
Base Incomplete
System configuration protection may be bypassed during debug mode.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation, Testing
- Security Lock bit protections should be reviewed for any bypass/override modes supported.
- Any supported override modes either should be removed or protected using authenticated debug modes.
- Security lock programming flow and lock properties should be tested in pre-silicon and post-silicon testing.
Source: MITRE CWE-1234
4 results · Feed
-
Medium 5.9
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported regist…
-
High 7.0
Unlocked Bootloader in dormakaba access manager
With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attack…
-
Low 3.6
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security v…
-
High 7.1
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security v…