Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1253: Incorrect Selection of Fuse Values

Base Draft

The logic level used to set a system to a secure state relies on a fuse being unblown.

More detail

Fuses are often used to store secret data, including security configuration data. When not blown, a fuse is considered to store a logic 0, and, when blown, it indicates a logic 1. Fuses are generally considered to be one-directional, i.e., once blown to logic 1, it cannot be reset to logic 0.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Logic should be designed in a way that blown fuses do not put the product into an insecure state that can be leveraged by an attacker.

Source: MITRE CWE-1253

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2023-6355

    Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechani…

    Gallagher Controller 7000