Weakness (CWE)
CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic
Base Incomplete
Faulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain privileges on the victim's system.
More detail
The functionality and security of the system heavily depend on the implementation of FSMs. FSMs can be used to indicate the current security state of the system. Lots of secure data operations and data transfers rely on the state reported by the FSM.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation
Define all possible states and handle all unused states through default statements. Ensure that system defaults to a secure state.
Source: MITRE CWE-1245
4 results · Clear filters · Feed
-
Medium 6.0
Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtua…
-
Medium 5.3
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to poten…
-
Medium 4.7
Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors …
-
Medium 5.3
Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to pot…