Tên: Improper Access Control in Fabric Bridge

The product uses a fabric bridge for transactions between two Intellectual Property (IP) blocks, but the bridge does not properly perform the expected privilege, identity, or other access control checks between those IP blocks.

Thông tin chung

Chi tiết nền tảng

Các cách xuất hiện

Architecture and Design
Implementation

Nền tảng áp dụng

Ngôn ngữ

Lớp: Not Language-Specific (Undetermined)

Hệ điều hành

Lớp: Not OS-Specific (Undetermined)

Kiến trúc

Lớp: Not Architecture-Specific (Undetermined)

Công nghệ

Tên: Processor Hardware (Undetermined)
Lớp: Not Technology-Specific (Undetermined)

Hậu quả phổ biến

Phạm vi	Tác động	Khả năng xảy ra
Confidentiality Integrity Access Control Availability	DoS: Crash, Exit, or Restart, Bypass Protection Mechanism, Read Memory, Modify Memory	Medium

Ví dụ đã quan sát

Tài liệu tham khảo	Mô tả
CVE-2019-6260	Baseboard Management Controller (BMC) device implements Advanced High-performance Bus (AHB) bridges that do not require authentication for arbitrary read and write access to the BMC's physical address space from the host, and possibly the network [REF-1138].

Các biện pháp giảm thiểu tiềm năng

Phases : Architecture and Design
Ensure that the design includes provisions for access-control checks in the bridge for both upstream and downstream transactions.
Phases : Implementation
Implement access-control checks in the bridge for both upstream and downstream transactions.

Phương pháp phát hiện

Simulation / Emulation

RTL simulation to ensure that bridge-access controls are implemented properly.
Hiệu quả : High

Formal Verification

Formal verification of bridge RTL to ensure that access control cannot be bypassed.
Hiệu quả : High

Ghi chú ánh xạ lỗ hổng

Lý do : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Bình luận : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

Mẫu tấn công liên quan

ID CAPEC	Tên mẫu tấn công
CAPEC-122	Privilege Abuse An adversary is able to exploit features of the target that should be reserved for privileged users or administrators but are exposed to use by lower or non-privileged accounts. Access to sensitive information and functionality must be controlled to ensure that only authorized users are able to access these resources.

Tài liệu tham khảo

Gửi

Tên	Tổ chức	Ngày	Ngày phát hành	Version
Arun Kanuparthi, Hareesh Khattri, Parbati Kumar Manna	Intel Corporation	2020-05-19 +00:00	2020-12-10 +00:00	4.3

Sửa đổi

Tên	Tổ chức	Ngày	Bình luận
CWE Content Team	MITRE	2021-10-28 +00:00	updated Observed_Examples
CWE Content Team	MITRE	2022-04-28 +00:00	updated Applicable_Platforms
CWE Content Team	MITRE	2022-06-28 +00:00	updated Applicable_Platforms
CWE Content Team	MITRE	2022-10-13 +00:00	updated Demonstrative_Examples, Description, Detection_Factors, Name, Potential_Mitigations
CWE Content Team	MITRE	2023-04-27 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-02-29 +00:00	updated Demonstrative_Examples, References
CWE Content Team	MITRE	2025-12-11 +00:00	updated Weakness_Ordinalities
CWE Content Team	MITRE	2026-10-28 +00:00	updated Background_Details, Demonstrative_Examples, Description

Chi tiết CWE-1317

CWE-1317