Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug Information

Base Draft

The hardware product enters debug mode but does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations.

More detail

Security sensitive values, keys, intermediate steps of cryptographic operations, etc. are stored in temporary registers in the hardware.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Whenever debug mode is enabled, all registers containing sensitive assets must be cleared.

Source: MITRE CWE-1258

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.