Security Flow Issues

Opis

Weaknesses in this category are related to improper design of full-system security flows, including but not limited to secure boot, secure update, and hardware-device attestation.

Wpisy w tej grupie

• CWE-1190 DMA Device Enabled Too Early in Boot Phase
• CWE-1193 Power-On of Untrusted Execution Core Before Enabling Fabric Access Control
• CWE-1264 Hardware Logic with Insecure De-Synchronization between Control and Data Channels
• CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code
• CWE-1283 Mutable Attestation or Measurement Reporting Data
• CWE-1310 Missing Ability to Patch ROM Code
• CWE-1326 Missing Immutable Root of Trust in Hardware
• CWE-1328 Security Version Number Mutable to Older Versions