CWE-1253
Incorrect Selection of Fuse Values
Description
The logic level used to set a system to a secure state relies on a fuse being unblown.
{"xhtml:p":["Fuses are often used to store secret data, including security configuration data. When not blown, a fuse is considered to store a logic 0, and, when blown, it indicates a logic 1. Fuses are generally considered to be one-directional, i.e., once blown to logic 1, it cannot be reset to logic 0."]}
Parent Weaknesses (ChildOf)
Common Consequences
Scope
Impact
Bypass Protection Mechanism, Gain Privileges or Assume Identity
Scope
Impact
DoS: Crash, Exit, or Restart
Scope
Impact
Read Memory
Scope
Impact
Modify Memory, Execute Unauthorized Code or Commands
Potential Mitigations
Logic should be designed in a way that blown fuses do not put the product into an insecure state that can be leveraged by an attacker.
Applicable Platforms
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now