CWE-1253 — Incorrect Selection of Fuse Values
CWE-1253: Incorrect Selection of Fuse Values
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Draft |
| Likelihood of exploit | — |
Description
The logic level used to set a system to a secure state relies on a fuse being unblown.
Fuses are often used to store secret data, including security configuration data. When not blown, a fuse is considered to store a logic 0, and, when blown, it indicates a logic 1. Fuses are generally considered to be one-directional, i.e., once blown to logic 1, it cannot be reset to logic 0.
Common consequences
- Access Control, Authorization: Bypass Protection Mechanism, Gain Privileges or Assume Identity
- Availability: DoS: Crash, Exit, or Restart
- Confidentiality: Read Memory
- Integrity: Modify Memory, Execute Unauthorized Code or Commands
Mitigations
Architecture and Design — Logic should be designed in a way that blown fuses do not put the product into an insecure state that can be leveraged by an attacker.
References
- CWE page: https://cwe.mitre.org/data/definitions/1253.html
- CWE list: https://cwe.mitre.org/data/index.html