Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1290: Incorrect Decoding of Security Identifiers

Base Incomplete

The product implements a decoding mechanism to decode certain bus-transaction signals to security identifiers, but it decodes an untrusted agent's security identifier into a trusted agent's security identifier.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Security identifier decoders must be reviewed for design consistency and common weaknesses.

  2. Implementation

    Access and programming flows must be tested in pre-silicon and post-silicon testing in order to check for this weakness.

Source: MITRE CWE-1290

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.