CWE-1326
Missing Immutable Root of Trust in Hardware
A missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.
Mitigation
Phase: Architecture and Design
Description:
- When architecting the system, the RoT should be designated for storage in a memory that does not allow further programming/writes.
Mitigation
Phase: Implementation
Description:
- During implementation and test, the RoT memory location should be demonstrated to not allow further programming/writes.
CAPEC-679: Exploitation of Improperly Configured or Implemented Memory Protections
An adversary takes advantage of missing or incorrectly configured access control within memory to read/write data or inject malicious code into said memory.
CAPEC-68: Subvert Code-signing Facilities
Many languages use code signing facilities to vouch for code's identity and to thus tie code to its assigned privileges within an environment. Subverting this mechanism can be instrumental in an attacker escalating privilege. Any means of subverting the way that a virtual machine enforces code signing classifies for this style of attack.