CWE-1189

Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

High

Description

The System-On-a-Chip (SoC) does not properly isolate shared resources between trusted and untrusted agents.

Potential Impact

Access Control: Bypass Protection Mechanism
Integrity: Quality Degradation

How to Fix

Architecture and Design

When sharing resources, avoid mixing agents of varying trust levels. Untrusted agents should not share resources with trusted agents.

Detection Methods

Automated Dynamic Analysis: Pre-silicon / post-silicon: Test access to shared systems resources (memory ranges, control registers, etc.) from untrusted software to verify that the assets are not incorrectly exposed to untrusted ...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1189 vulnerabilities in your codebase.

Get Security Assessment