CWE-1294

Insecure Security Identifier Mechanism

Medium

Description

The System-on-Chip (SoC) implements a Security Identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Identifiers are not correctly implemented.

Potential Impact

How to Fix

Architecture and Design

Security Identifier Decoders must be reviewed for design inconsistency and common weaknesses.

Implementation

Access and programming flows must be tested in pre-silicon and post-silicon testing.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1294 vulnerabilities in your codebase.

Get Security Assessment