Weakness (CWE)
CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug Information
Base Draft
The hardware product enters debug mode but does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations.
More detail
Security sensitive values, keys, intermediate steps of cryptographic operations, etc. are stored in temporary registers in the hardware.
How to prevent it (1 mitigation)
-
Architecture and Design
Whenever debug mode is enabled, all registers containing sensitive assets must be cleared.
Source: MITRE CWE-1258
4 results · Clear filters · Feed
-
Medium 4.1
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive…
-
Medium 4.9
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.…
-
Medium 4.9
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high priv…
-
Medium 5.3
WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability in 1clickmigration 1 Click WordPress Migration 1-click-migration allows Retrieve Embedded Sensitive Data.This issue affects 1 Click WordPress Migration: from n/a through…