CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface
Description
The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.
- Abstraction
- BaseA weakness specific enough to point to detection and prevention methods.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- ConfidentialityIntegrityAvailabilityAccess Control
Modify Memory; Read Memory; DoS: Resource Consumption (Other); Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity; Alter Execution Logic; Bypass Protection Mechanism; Quality Degradation
Potential mitigations
- RequirementsEffectiveness: Defense in Depth
Protect assets from accesses against all potential interfaces and alternate paths.
- Architecture and DesignEffectiveness: Defense in Depth
Protect assets from accesses against all potential interfaces and alternate paths.
- ImplementationEffectiveness: Defense in Depth
Protect assets from accesses against all potential interfaces and alternate paths.