Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy

Base Draft

An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.

How to prevent it (3 mitigations)
  1. Architecture and Design

    Ensure the design does not allow error injection in modes intended for normal run-time operation. Provide access controls on interfaces for injecting errors.

  2. Implementation

    Disallow error injection in modes which are expected to be used for normal run-time operation. Provide access controls on interfaces for injecting errors.

  3. Integration

    Add an access control layer atop any unprotected interfaces for injecting errors.

Source: MITRE CWE-1334

0 results · Clear filters · Feed

Nothing found.