Weakness (CWE)
CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks
Base Incomplete
System configuration protection may be bypassed during debug mode.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation, Testing
- Security Lock bit protections should be reviewed for any bypass/override modes supported.
- Any supported override modes either should be removed or protected using authenticated debug modes.
- Security lock programming flow and lock properties should be tested in pre-silicon and post-silicon testing.
Source: MITRE CWE-1234
1 result · Clear filters · Feed
-
Low 3.6
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security v…