Weakness (CWE)
CWE-1312: Missing Protection for Mirrored Regions in On-Chip Fabric Firewall
The firewall in an on-chip fabric protects the main addressed region, but it does not protect any mirrored memory or memory-mapped-IO (MMIO) regions.
More detail
Few fabrics mirror memory and address ranges, where mirrored regions contain copies of the original data. This redundancy is used to achieve fault tolerance. Whatever protections the fabric firewall implements for the original region should also apply to the mirrored regions. If not, an attacker could bypass existing read/write protections by reading from/writing to the mirrored regions to leak or corrupt the original data.
How to prevent it (2 mitigations)
-
Architecture and Design
The fabric firewall should apply the same protections as the original region to the mirrored regions.
-
Implementation
The fabric firewall should apply the same protections as the original region to the mirrored regions.
Source: MITRE CWE-1312
1 result · Clear filters · Feed
-
Medium 6.2
Eco Search 1.0.2.0 Denial of Service
Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar…