Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents

Base Draft

The product's hardware-enforced access control for a particular resource improperly accounts for privilege discrepancies between control and write policies.

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation

    Access-control-policy definition and programming flow must be sufficiently tested in pre-silicon and post-silicon testing.

Source: MITRE CWE-1268

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed