CWE-1292
Weakness AllowedIncorrect Conversion of Security Identifiers
Abstraction: Base · Status: Draft
The product implements a conversion mechanism to map certain bus-transaction signals to security identifiers, but this conversion between protocols is incorrectly implemented.
Mapping guidance
This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
Modes of introduction
Such issues could be introduced during hardware architecture and design, then identified later during Testing or System Configuration phases.
Such issues could be introduced during hardware implementation, then identified later during Testing or System Configuration phases.
Content history
updated Related_Attack_Patterns
updated Applicable_Platforms
updated Applicable_Platforms
updated Demonstrative_Examples, Related_Attack_Patterns
updated Relationships
updated Mapping_Notes
updated Weakness_Ordinalities
updated Background_Details, Common_Consequences, Description, Relationships
0 vulnerabilities reference this CWE, most recent first.
No vulnerabilities reference this CWE.
Mitigation
Security identifier decoders must be reviewed for design inconsistency and common weaknesses.
Mitigation
Access and programming flows must be tested in pre-silicon and post-silicon testing.
No CAPEC attack patterns related to this CWE.