COMMON WEAKNESS ENUMERATIONStable

CWE-1244

Internal Asset Exposed to Unsafe Debug Access Level or State

The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents.

Genişletilmiş açıklama

Debug authorization can have multiple levels of access, defined such that different system internal assets are accessible based on the current authorized debug level. Other than debugger authentication (e.g., using passwords or challenges), the authorization can also be based on the system state or boot stage. For example, full system debug access might only be allowed early in boot after a system reset to ensure that previous session data is not accessible to the authenticated debugger.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

Read Memory

Etkilenen güvenlik alanları: Confidentiality

If a protection mechanism does not ensure that internal assets have the correct debug access level during each boot stage or change in system state, an attacker could obtain sensitive information from the internal asset using a debugger.
Modify Memory

Etkilenen güvenlik alanları: Integrity

Gain Privileges or Assume IdentityBypass Protection Mechanism

Etkilenen güvenlik alanları: Authorization, Access Control

Savunma

Nasıl önlenir ve çözülür?

Architecture and Design · Implementation

Birden fazla yaşam döngüsü evresinde uygulanacak savunma

Detay
For security-sensitive assets accessible over debug/test interfaces, only allow trusted agents.

Etkinlik: High

Architecture and Design

Mimari ve tasarım yaklaşımı

Detay
Apply blinding [REF-1219] or masking techniques in strategic areas.

Etkinlik: Limited

Implementation

Uygulama aşaması savunması

Detay
Add shielding or tamper-resistant protections to the device, which increases the difficulty and cost for accessing debug/test interfaces.

Etkinlik: Limited

Doğrulama

Nasıl tespit edilir?

Manual Analysis

Moderate
Check 2 devices for their passcode to authenticate access to JTAG/debugging ports. If the passcodes are missing or the same, update the design to fix and retest. Check communications over JTAG/debugging ports for encryption. If the communications are not encrypted, fix the design and retest.
CWE-1244: Common Weakness Enumeration Entry CWE-1244 · DayBreach Sözlük · DayBreach