CWE-1262 — Improper Access Control for Register Interface
CWE-1262: Improper Access Control for Register Interface
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Stable |
| Likelihood of exploit | — |
Description
The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.
Common consequences
- Confidentiality, Integrity: Read Memory, Read Application Data, Modify Memory, Modify Application Data, Gain Privileges or Assume Identity, Bypass Protection Mechanism, Unexpected State, Alter Execution Logic
Mitigations
Architecture and Design — Design proper policies for hardware register access from software.
Implementation — Ensure that access control policies for register access are implemented in accordance with the specified design.
References
- CWE page: https://cwe.mitre.org/data/definitions/1262.html
- CWE list: https://cwe.mitre.org/data/index.html