CWE-1326

Missing Immutable Root of Trust in Hardware

A missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.

Mitigation

Phase: Architecture and Design

Description:

  • When architecting the system, the RoT should be designated for storage in a memory that does not allow further programming/writes.
Mitigation

Phase: Implementation

Description:

  • During implementation and test, the RoT memory location should be demonstrated to not allow further programming/writes.
CAPEC-679: Exploitation of Improperly Configured or Implemented Memory Protections

An adversary takes advantage of missing or incorrectly configured access control within memory to read/write data or inject malicious code into said memory.

CAPEC-68: Subvert Code-signing Facilities

Many languages use code signing facilities to vouch for code's identity and to thus tie code to its assigned privileges within an environment. Subverting this mechanism can be instrumental in an attacker escalating privilege. Any means of subverting the way that a virtual machine enforces code signing classifies for this style of attack.

Back to CWE stats page