Tag Archives: Missing Protection Mechanism for Alternate Hardware Interface

CWE-1299 – Missing Protection Mechanism for Alternate Hardware Interface

Read Time:58 Second

Description

The lack of protections on alternate paths to access
control-protected assets (such as unprotected shadow registers
and other external facing unguarded interfaces) allows an
attacker to bypass existing protections to the asset that are
only performed against the primary path.

Modes of Introduction:

– Architecture and Design

 

 

Related Weaknesses

CWE-1191
CWE-420
CWE-288

 

Consequences

Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Alter Execution Logic, Bypass Protection Mechanism, Quality Degradation

 

Potential Mitigations

Phase: Requirements

Effectiveness: Defense in Depth

Description: 

Protect assets from accesses against all potential interfaces and alternate paths.

Phase: Architecture and Design

Effectiveness: Defense in Depth

Description: 

Protect assets from accesses against all potential interfaces and alternate paths.

Phase: Implementation

Effectiveness: Defense in Depth

Description: 

Protect assets from accesses against all potential interfaces and alternate paths.

CVE References

  • CVE-2017-18293
    • When GPIO is protected by blocking access
      to corresponding GPIO resource registers,
      protection can be bypassed by writing to the
      corresponding banked GPIO registers instead.
  • CVE-2020-15483
    • monitor device allows access to physical UART debug port without authentication