CWE-1292

Incorrect Conversion of Security Identifiers

Medium

Description

The product implements a conversion mechanism to map certain bus-transaction signals to security identifiers. However, if the conversion is incorrectly implemented, untrusted agents can gain unauthorized access to the asset.

Potential Impact

How to Fix

Architecture and Design

Security identifier decoders must be reviewed for design inconsistency and common weaknesses.

Implementation

Access and programming flows must be tested in pre-silicon and post-silicon testing.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1292 vulnerabilities in your codebase.

Get Security Assessment