CAPEC-702: Exploiting Incorrect Chaining or Granularity of Hardware Debug Components
Description
An adversary exploits incorrect chaining or granularity of hardware debug components in order to gain unauthorized access to debug functionality on a chip. This happens when authorization is not checked on a per function basis and is assumed for a chain or group of debug functionality.
- Likelihood of attack
- Low
- Typical severity
- Medium
- Abstraction
- DetailedA low-level, detailed pattern, often for a particular technology.
Mechanism of attack: Subvert Access Control
Prerequisites
- Hardware device has an exposed debug interface
Skills required
- MediumAbility to identify physical debug interfaces on a device
- MediumAbility to operate devices to scan and connect to an exposed debug interface
Consequences
- Confidentiality
Read Data
- Integrity
Modify Data
- Access ControlAuthorization
Gain Privileges
Mitigations
- Implement: Ensure that debug components are properly chained, and their granularity is maintained at different authorization levels
- Perform Post-silicon validation tests at various authorization levels to ensure that debug components are only accessible to authorized users