CWE-1243

Sensitive Non-Volatile Information Not Protected During Debug

Medium

Description

Access to security-sensitive information stored in fuses is not limited during debug.

Potential Impact

How to Fix

Architecture and Design

Disable access to security-sensitive information stored in fuses directly and also reflected from temporary storage locations when in debug mode.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1243 vulnerabilities in your codebase.

Get Security Assessment