CWE-1312

Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

Medium

Description

The firewall in an on-chip fabric protects the main addressed region, but it does not protect any mirrored memory or memory-mapped-IO (MMIO) regions.

Potential Impact

Confidentiality: Modify Memory

How to Fix

Architecture and Design

The fabric firewall should apply the same protections as the original region to the mirrored regions.

Implementation

The fabric firewall should apply the same protections as the original region to the mirrored regions.

Detection Methods

Manual Dynamic Analysis: Using an external debugger, send write transactions to mirrored regions to test if original, write-protected regions are modified. Similarly, send read transactions to mirrored regions to test if the ...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1312 vulnerabilities in your codebase.

Get Security Assessment