On-Chip Debug and Test Interface With Improper Access Control
CWE-1191
The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.
If authorization, authentication, or some other form of access control is not implemented or not implemented correctly, a user may be able to bypass on-chip protection mechanisms through the debug interface.
We track 10 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
How this weakness is prevented
- Architecture and Design: If feasible, the manufacturer should disable the JTAG interface or implement authentication and authorization for the JTAG interface. If authentication logic is added, it should be resistant to timing attacks. Security-sensitive data stored in registers, such as keys, etc. should be cleared when entering debug mode.
Latest On-Chip Debug and Test Interface With Improper Access Control vulnerabilities
- 7.2 High severity
Neo Series MVP2: On-Chip Debug and Test Interface With Improper Access Control
- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63.
- 7.2 High severity
EasyIO FS32: On-Chip Debug and Test Interface With Improper Access Control
- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63.
- 7.0 High severity
Boot Optimized Server Storage (BOSS): On-Chip Debug and Test Interface With Improper Access Control
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could pot
- 9.3 Critical severity
iC7-Automation SP: On-Chip Debug and Test Interface With Improper Access Control
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data an
- 8.7 High severity
AMD EPYC™ 7003 Series Processors: On-Chip Debug and Test Interface With Improper Access Control
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- 7.5 High severity
Meatmeet Pro WiFi & Bluetooth Meat Thermometer…: On-Chip Debug and Test Interface With Improper Access Control
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additio
- 8.6 High severity
nRF52810: On-Chip Debug and Test Interface With Improper Access Control
On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the l
- 9.3 Critical severity
Life2000 Ventilation System: On-Chip Debug and Test Interface With Improper Access Control
The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized
- 8.6 High severity
SyroTech SY-GPON-1110-WDONT router: On-Chip Debug and Test Interface With Improper Access Control
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable syste
- 7.2 High severity
4th Generation Intel(R) Xeon(R) Processors…: On-Chip Debug and Test Interface With Improper Access Control
On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.