CWE-1298Hardware Logic Contains Race Conditions

PUBLISHEDweakness record
released 2020-08-20 · last modified 2025-12-11

Metadata

CWE ID:
CWE-1298
摘要:
Base
结构:
Simple
状态:
Draft
发布日期:
2020-08-20
更新日期:
2025-12-11

名称

Hardware Logic Contains Race Conditions

描述

A race condition in the hardware logic results in undermining security guarantees of the system.

A race condition in logic circuits typically occurs when a logic gate gets inputs from signals that have traversed different paths while originating from the same source. Such inputs to the gate can change at slightly different times in response to a change in the source signal. This results in a timing error or a glitch (temporary or permanent) that causes the output to change to an unwanted state before settling back to the desired state. If such timing errors occur in access control logic or finite state machines that are implemented in security sensitive flows, an attacker might exploit them to circumvent existing protections.

常见后果

范围:
Access Control
影响:
Bypass Protection Mechanism, Gain Privileges or Assume Identity, Alter Execution Logic

相关 CWE