CWE-1245 - Improper Finite State Machines (FSMs) in Hardware Logic

Read Time:30 Second

Description

Faulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain privileges on the victim’s system.

Modes of Introduction:

– Architecture and Design

Related Weaknesses

CWE-684

Consequences

Availability, Access Control: Unexpected State, DoS: Crash, Exit, or Restart, DoS: Instability, Gain Privileges or Assume Identity

Potential Mitigations

Phase: Architecture and Design, Implementation

Effectiveness: High

Description:

Define all possible states and handle all unused states through default statements. Ensure that system defaults to a secure state.

CVE References

InCWE- 1245, Improper Finite State Machines (FSMs) in Hardware Logic

The Most Dangerous Vulnerabilities in Apache Tomcat and How to Protect Against Them

Apache Tomcat is an open-source web server and servlet container that is widely used in enterprise environments to run Java...

rocco

February 19, 2023February 19, 2023

ZDI-CAN-18333: A Critical Zero-Day Vulnerability in Microsoft Windows

Zero-day vulnerabilities are a serious threat to cybersecurity, as they can be exploited by malicious actors to gain unauthorized access...

rocco

February 19, 2023February 19, 2023

CWE-669 – Incorrect Resource Transfer Between Spheres

Description The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere,...

rocco

May 26, 2022