CWE Database
/

CWE-1312

Back to CWE list

CWE-1312

Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

Base
Draft

Description

The firewall in an on-chip fabric protects the main addressed region, but it does not protect any mirrored memory or memory-mapped-IO (MMIO) regions.

{"xhtml:p":["Few fabrics mirror memory and address ranges, where mirrored regions contain copies of the original data. This redundancy is used to achieve fault tolerance. Whatever protections the fabric firewall implements for the original region should also apply to the mirrored regions. If not, an attacker could bypass existing read/write protections by reading from/writing to the mirrored regions to leak or corrupt the original data."]}

Parent Weaknesses (ChildOf)

Related Weaknesses

Common Consequences

Scope

Confidentiality
Integrity
Access Control

Impact

Modify Memory, Read Memory, Bypass Protection Mechanism

Potential Mitigations

Architecture and Design

The fabric firewall should apply the same protections as the original region to the mirrored regions.

Implementation

The fabric firewall should apply the same protections as the original region to the mirrored regions.

Applicable Platforms

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now