Description
The lack of protections on alternate paths to access
control-protected assets (such as unprotected shadow registers
and other external facing unguarded interfaces) allows an
attacker to bypass existing protections to the asset that are
only performed against the primary path.
Modes of Introduction:
– Architecture and Design
Related Weaknesses
CWE-1191
CWE-420
CWE-288
Consequences
Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Alter Execution Logic, Bypass Protection Mechanism, Quality Degradation
Potential Mitigations
Phase: Requirements
Effectiveness: Defense in Depth
Description:
Protect assets from accesses against all potential interfaces and alternate paths.
Phase: Architecture and Design
Effectiveness: Defense in Depth
Description:
Protect assets from accesses against all potential interfaces and alternate paths.
Phase: Implementation
Effectiveness: Defense in Depth
Description:
Protect assets from accesses against all potential interfaces and alternate paths.
CVE References
- CVE-2017-18293
- When GPIO is protected by blocking access
to corresponding GPIO resource registers,
protection can be bypassed by writing to the
corresponding banked GPIO registers instead.
- CVE-2020-15483
- monitor device allows access to physical UART debug port without authentication
