Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1294: Insecure Security Identifier Mechanism

Class Incomplete

The System-on-Chip (SoC) implements a Security Identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Identifiers are not correctly implemented.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Security Identifier Decoders must be reviewed for design inconsistency and common weaknesses.

  2. Implementation

    Access and programming flows must be tested in pre-silicon and post-silicon testing.

Source: MITRE CWE-1294

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.