Hardware Internal or Debug Modes Allow Override of Locks
CWE-1234
System configuration protection may be bypassed during debug mode.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.0.
How this weakness is prevented
- Architecture and Design Implementation Testing: Security Lock bit protections should be reviewed for any bypass/override modes supported. Any supported override modes either should be removed or protected using authenticated debug modes. Security lock programming flow and lock properties should be tested in pre-silicon and post-silicon testing.
Latest Hardware Internal or Debug Modes Allow Override of Locks vulnerabilities
- 7.0 High severity
Access Manager 92xx-k7: Hardware Internal or Debug Modes Allow Override of Locks
With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attacke