Weakness (CWE)
CWE-1262: Improper Access Control for Register Interface
The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
More detail
Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.
How to prevent it (2 mitigations)
-
Architecture and Design
Design proper policies for hardware register access from software.
-
Implementation
Ensure that access control policies for register access are implemented in accordance with the specified design.
Source: MITRE CWE-1262
1 result · Clear filters · Feed
-
Low 2.8
This Power System update is being released to address
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations.