Weakness (CWE)

CWE-1323: Improper Management of Sensitive Trace Data

Base Draft

Trace data collected from several sources on the
System-on-Chip (SoC) is stored in unprotected locations or
transported to untrusted agents.

How to prevent it (1 mitigation)

Implementation

Since
these traces are collected from several security-sensitive
sources, they must be protected against untrusted
debuggers.
Tag traces to indicate owner and debugging privilege level (designer, OEM, or end user) needed to access that trace.

Source: MITRE CWE-1323

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.