CWE一覧に戻る
CWE-1304

パワーセーブ/リストア操作中のハードウェア構成状態の完全性の不適切な保持

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation
脆弱性 レビュー中
JA

本製品はパワーセーブ/リストア動作を実行します。
を実行しますが、構成状態の整合性が維持され
の完全性を保証するものではありません。
を保証するものではありません。

パワーダウンする前に、知的財産(IP
IP)は、現在の状態(S)をフラッシュや常時オンメモリなどの永続的ストレージに保存する。
保存する。
保存する。 このプロセス中
永続ストレージにアクセスできる攻撃者は
を変更する可能性がある。
を変更する可能性があります。
ハードウェアに損害を与える可能性がある。IPが検証を行わない場合
IPが永続メモリに保存されたコンフィギュレーション状態を検証しない場合
IPが永続的メモリに保存されたコンフィギュレーション状態を検証しない場合、電源が回復したとき、または再び動作可能になったときに、IPが侵害される可能性がある、
IPが危険にさらされる可能性がある。
IPが危険にさらされる可能性があります。

EN

The product performs a power save/restore
operation, but it does not ensure that the integrity of
the configuration state is maintained and/or verified between
the beginning and ending of the operation.

Before powering down, the Intellectual
Property (IP) saves current state (S) to persistent
storage such as flash or always-on memory in order to
optimize the restore operation. During this process,
an attacker with access to the persistent storage may
alter (S) to a configuration that could potentially
modify privileges, disable protections, and/or cause
damage to the hardware. If the IP does not validate
the configuration state stored in persistent memory,
upon regaining power or becoming operational again,
the IP could be compromised through the activation of
an unwanted/harmful configuration.

Scope: Confidentiality, Integrity / Impact: DoS: Instability; DoS: Crash, Exit, or Restart; DoS: Resource Consumption (Other); Gain Privileges or Assume Identity; Bypass Protection Mechanism; Alter Execution Logic; Quality Degradation; Unexpected State; Reduce Maintainability; Reduce Performance; Reduce Reliability
Inside the IP, incorporate integrity checking
on the configuration state via a cryptographic
hash. The hash can be protected inside the IP such as
by storing it in internal registers which never lose
power. Before powering down, the IP performs a hash of
the configuration and saves it in these persistent
registers. Upon restore, the IP performs a hash of the
saved configuration and compares it with the
saved hash. If they do not match, then the IP should
not trust the configuration.
Outside the IP, incorporate integrity checking
of the configuration state via a trusted agent. Before
powering down, the trusted agent performs a hash of the
configuration and saves the hash in persistent storage.
Upon restore, the IP requests the trusted agent
validate its current configuration. If the
configuration hash is invalid, then the IP should not
trust the configuration.
Outside the IP, incorporate a protected
environment that prevents undetected modification of
the configuration state by untrusted agents. Before
powering down, a trusted agent saves the IP's
configuration state in this protected location that
only it is privileged to. Upon restore, the trusted
agent loads the saved state into the IP.
MITRE公式ページ — CWE-1304