Weakness (CWE)
CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State
The product uses physical debug or test
interfaces with support for multiple access levels, but it
assigns the wrong debug access level to an internal asset,
providing unintended access to the asset from untrusted debug
agents.
How to prevent it (3 mitigations)
-
Architecture and Design, Implementation
For security-sensitive assets accessible over debug/test interfaces, only allow trusted agents.
-
Architecture and Design
Apply blinding [REF-1219] or masking techniques in strategic areas.
-
Implementation
Add shielding or tamper-resistant protections to the device, which increases the difficulty and cost for accessing debug/test interfaces.
Source: MITRE CWE-1244
1 result · Clear filters · Feed
-
Low 2.4
CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard
The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions. Researchers demonstrated that, after cicumventing the device’s protective enclosure, it was possible to conne…