CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.
常见后果
影响范围: Access Control
技术影响: Other
说明: System security configuration cannot be defined in a way that does not conflict with functional requirements of device.
潜在缓解措施
阶段: Architecture and Design
引入模式
| 阶段 | 说明 |
|---|---|
| Architecture and Design | Such issues are introduced during hardware architecture and design since software controls and configuration are defined during these phases and identified later during Testing or System Configuration phases. |