Skip to content

Commit 5951454

Browse files
committed
use enumeration for CWEs
1 parent 5f601ad commit 5951454

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

methodologies/hardware_testing.json

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -140,7 +140,7 @@
140140
"title":"Improper Isolation of Shared Resources",
141141
"caption": "",
142142
"description":"A SOC may use pin multiplexing allowing an untrusted agent to access assets/info intended to trusted agents only",
143-
"CWE":"CWE-1189"
143+
"CWE": ["CWE-1189"]
144144
},
145145
{
146146
"key":"bac_on_chip_debugger",
@@ -162,7 +162,7 @@
162162
"title":"Cryptographic Implementation",
163163
"caption": "",
164164
"description":"Assess if the cryptographic algorithm in use is non-standard or a disallowed/non-compliant version.",
165-
"CWE":"CWE-1240"
165+
"CWE": ["CWE-1240"]
166166
},
167167
{
168168
"key": "fault_injection_and_side_channel_attacks",
@@ -177,28 +177,28 @@
177177
"title":"Improper Handling of Memory Overlap",
178178
"caption": "",
179179
"description":"Assess if isolated memory regions and access control policies allow software with low privileges to make changes to overlapping memory also used by software running with higher privileges.",
180-
"CWE":"CWE-1260"
180+
"CWE": ["CWE-1260"]
181181
},
182182
{
183183
"key":"clearing_memory_during_state_transition",
184184
"title":"Sensitive Information Uncleared Before State Transition",
185185
"caption": "",
186186
"description":"Assess if sensitive information only needed for one state is cleared after transitioning to the next state, such as during boot or waking up from sleep mode.",
187-
"CWE":"CWE-1272"
187+
"CWE": ["CWE-1272"]
188188
},
189189
{
190190
"key":"volatile_memory_boot_code",
191191
"title":"Improper Access Control for Volatile Memory for Boot Code",
192192
"caption": "",
193193
"description":"Assess if the secure boot process can be bypassed to execute untrusted malicious boot code",
194-
"CWE":"CWE-1274"
194+
"CWE": ["CWE-1274"]
195195
},
196196
{
197197
"key":"firmware_not_updating",
198198
"title":"Firmware Not Getting Updates",
199199
"caption": "",
200200
"description":"Verify if the firmware can receive regular updates as vulnerabilities are discovered in the future.",
201-
"CWE":"CWE-1277"
201+
"CWE": ["CWE-1277"]
202202
},
203203
{
204204
"key":"root_shell",

0 commit comments

Comments
 (0)