CWE-1262 - Improper Access Control for Register Interface
- 摘要：Base
- 结构：Simple
- 状态：Stable
- 发布日期：2020-02-24
- 更新日期：2025-12-11
名称
Improper Access Control for Register Interface
描述
The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.
常见后果
范围：Confidentiality, Integrity
影响：Read Memory, Read Application Data, Modify Memory, Modify Application Data, Gain Privileges or Assume Identity, Bypass Protection Mechanism, Unexpected State, Alter Execution Logic
注释：Confidentiality of hardware assets may be violated if the protected information can be read out by software through the register interface. Registers storing security state, settings, other security-critical data may be corruptible by software without correctly implemented protections.