CWE-1296
Weakness AllowedIncorrect Chaining or Granularity of Debug Components
Abstraction: Base · Status: Incomplete
The product's debug components contain incorrect chaining or granularity of debug components.
Logic errors during design or synthesis could misconfigure the interconnection of the debug components, which could allow unintended access permissions.
Mapping guidance
This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
Modes of introduction
Logic errors during design or synthesis could misconfigure the interconnection of the debug components, which could allow unintended access permissions.
Detection methods
Architecture or Design Review
Appropriate Post-Si tests should be carried out at various authorization levels to ensure that debug components are properly chained and accessible only to users with appropriate credentials.
Effectiveness: High
Dynamic Analysis with Manual Results Interpretation
Appropriate Post-Si tests should be carried out at various authorization levels to ensure that debug components are properly chained and accessible only to users with appropriate credentials.
Effectiveness: High
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
Content history
updated Related_Attack_Patterns
updated Applicable_Platforms, Related_Attack_Patterns
updated Applicable_Platforms
updated Related_Attack_Patterns
updated Relationships
updated Mapping_Notes
updated Weakness_Ordinalities
updated Background_Details, Description, Modes_of_Introduction
0 vulnerabilities reference this CWE, most recent first.
No vulnerabilities reference this CWE.
Mitigation
Ensure that debug components are properly chained and their granularity is maintained at different authentication levels.
CAPEC-121: Exploit Non-Production Interfaces
An adversary exploits a sample, demonstration, test, or debug interface that is unintentionally enabled on a production system, with the goal of gleaning information or leveraging functionality that would otherwise be unavailable.
CAPEC-702: Exploiting Incorrect Chaining or Granularity of Hardware Debug Components
An adversary exploits incorrect chaining or granularity of hardware debug components in order to gain unauthorized access to debug functionality on a chip. This happens when authorization is not checked on a per function basis and is assumed for a chain or group of debug functionality.