CWE-1312: Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

low-risk

The firewall in an on-chip fabric protects the main addressed region, but it does not protect any mirrored memory or memory-mapped-IO (MMIO) regions.

Abstraction: Base

Common Consequences

Confidentiality Modify Memory

Detection Methods

Manual Dynamic Analysis

Using an external debugger, send write transactions to mirrored regions to test if original, write-protected regions are modified. Similarly, send read transactions to mirrored regions to test if the original, read-protected signals can be read.

Real-World Examples (1)

CVE CVSS EPSS KEV
CVE-2018-25244 6.2 0.0%
0
/ 100
low-risk
Active Threat 0/50 · Minimal
Exploit Availability 0/50 · Minimal