Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic

Base Incomplete

Faulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain privileges on the victim's system.

More detail

The functionality and security of the system heavily depend on the implementation of FSMs. FSMs can be used to indicate the current security state of the system. Lots of secure data operations and data transfers rely on the state reported by the FSM.

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation

    Define all possible states and handle all unused states through default statements. Ensure that system defaults to a secure state.

Source: MITRE CWE-1245

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-58311

    Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness

    Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys usin…

    dormakaba Dormakaba Saflok System 6000