Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State

Base

The product uses physical debug or test
interfaces with support for multiple access levels, but it
assigns the wrong debug access level to an internal asset,
providing unintended access to the asset from untrusted debug
agents.

How to prevent it (3 mitigations)

  1. Architecture and Design, Implementation

    For security-sensitive assets accessible over debug/test interfaces, only allow trusted agents.

  2. Architecture and Design

    Apply blinding [REF-1219] or masking techniques in strategic areas.

  3. Implementation

    Add shielding or tamper-resistant protections to the device, which increases the difficulty and cost for accessing debug/test interfaces.

Source: MITRE CWE-1244

All Critical High Medium Low Exploited only Public exploit

13 results · Feed