CWE-1317
Weakness AllowedImproper Access Control in Fabric Bridge
Abstraction: Base · Status: Draft
The product uses a fabric bridge for transactions between two Intellectual Property (IP) blocks, but the bridge does not properly perform the expected privilege, identity, or other access control checks between those IP blocks.
For overall system security, it is important that the access-control privileges associated with any fabric transaction are consistently maintained and applied, even when they are routed or translated by a fabric bridge. A bridge that is connected to a fabric without security features forwards transactions to the slave without checking the privilege level of the master and results in a weakness in SoC access-control security. The same weakness occurs if a bridge does not check the hardware identity of the transaction received from the slave interface of the bridge.
Mapping guidance
This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
Modes of introduction
Detection methods
Simulation / Emulation
RTL simulation to ensure that bridge-access controls are implemented properly.
Effectiveness: High
Formal Verification
Formal verification of bridge RTL to ensure that access control cannot be bypassed.
Effectiveness: High
Content history
suggested demonstrative example
suggested demonstrative example
updated Observed_Examples
updated Applicable_Platforms
updated Applicable_Platforms
updated Demonstrative_Examples, Description, Detection_Factors, Name, Potential_Mitigations
updated Relationships
updated Mapping_Notes
updated Demonstrative_Examples, References
updated Weakness_Ordinalities
updated Background_Details, Demonstrative_Examples, Description
0 vulnerabilities reference this CWE, most recent first.
No vulnerabilities reference this CWE.
Mitigation
Ensure that the design includes provisions for access-control checks in the bridge for both upstream and downstream transactions.
Mitigation
Implement access-control checks in the bridge for both upstream and downstream transactions.
CAPEC-122: Privilege Abuse
An adversary is able to exploit features of the target that should be reserved for privileged users or administrators but are exposed to use by lower or non-privileged accounts. Access to sensitive information and functionality must be controlled to ensure that only authorized users are able to access these resources.