English
Français
Light
Dark
System

Alert System

Stay informed at all times
Create an account Open a free account Login Manage your alerts

CWE-1194 View Detail

CWE-1194

Hardware Design
Draft
Graph
2019-12-27 +00:00
2023-06-29 +00:00
CWE Mitre.org

Alerte pour un CWE

Stay informed of any changes for a specific CWE.
Alert management

Hardware Design

This view organizes weaknesses around concepts that are frequently used or encountered in hardware design. Accordingly, this view can align closely with the perspectives of designers, manufacturers, educators, and assessment vendors. It provides a variety of categories that are intended to simplify navigation, browsing, and mapping.

Members

CWE-1198: Weaknesses in this category are related to features and mechanisms providing hardware-based isolation and access control (e.g., identity, policy, locking control) of sensitive shared hardware resources such as registers and fuses.
CWE-276: Incorrect Default Permissions Base
CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') Base
CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) Base
CWE-1192: Improper Identifier for IP Block used in System-On-Chip (SOC) Base
CWE-1220: Insufficient Granularity of Access Control Base
CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks Base
CWE-1242: Inclusion of Undocumented Features or Chicken Bits Base
CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges Base
CWE-1262: Improper Access Control for Register Interface Base
CWE-1267: Policy Uses Obsolete Encoding Base
CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents Base
CWE-1280: Access Control Check Implemented After Asset is Accessed Base
CWE-1294: Insecure Security Identifier Mechanism Base
CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface Base
CWE-1302: Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) Base
CWE-1303: Non-Transparent Sharing of Microarchitectural Resources Base
CWE-1314: Missing Write Protection for Parametric Data Values Base
CWE-1318: Missing Support for Security Features in On-chip Fabrics or Buses Base
CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy Base
CWE-1420: Exposure of Sensitive Information during Transient Execution Base

Informations

Vulnerability Mapping Notes

Rationale : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Comments : Use this View or other Views to search and navigate for the appropriate weakness.

Notes

The top level categories in this view represent commonly understood areas/terms within hardware design, and are meant to aid the user in identifying potential related weaknesses. It is possible for the same weakness to exist within multiple different categories.
This view attempts to present weaknesses in a simple and intuitive way. As such it targets a single level of abstraction. It is important to realize that not every CWE will be represented in this view. High-level class weaknesses and low-level variant weaknesses are mostly ignored. However, by exploring the weaknesses that are included, and following the defined relationships, one can find these higher and lower level weaknesses.

Audience

Stakeholder Description
Hardware Designers Hardware Designers use this view to better understand potential mistakes that can be made in specific areas of their IP design. The use of concepts with which hardware designers are familiar makes it easier to navigate.
Educators Educators use this view to teach future professionals about the types of mistakes that are commonly made in hardware design.

Submission

Name Organization Date Date Release Version
CWE Content Team MITRE 2019-12-27 +00:00 2020-02-24 +00:00 4.0

Modifications

Name Organization Date Comment
CWE Content Team MITRE 2022-06-28 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

More information
Click on the button to the left (OFF), to authorize the inscription of cookie improving the functionalities of the site. Click on the button to the left (Accept all), to unauthorize the inscription of cookie improving the functionalities of the site.