logo

CWE-1315 - Improper Setting of Bus Controlling Capability in Fabric End-point

CWE-1315

  • Abstraction:
  • Base
  • Structure:
  • Simple
  • Status:
  • Incomplete
Weakness Name

Improper Setting of Bus Controlling Capability in Fabric End-point

Description

The bus controller enables bits in the fabric end-point to allow responder devices to control transactions on the fabric.

To support reusability, certain fabric interfaces and end points provide a configurable register bit that allows IP blocks connected to the controller to access other peripherals connected to the fabric. This allows the end point to be used with devices that function as a controller or responder. If this bit is set by default in hardware, or if firmware incorrectly sets it later, a device intended to be a responder on a fabric is now capable of controlling transactions to other devices and might compromise system security.

Common Consequences

Scope: Access Control

Impact: Modify Memory, Read Memory, Bypass Protection Mechanism

Related Weaknesses
  • Release Date:
  • 2020-12-10
  • Latest Modification Date:
  • 2023-06-29

Free security scan for your website