|
140 | 140 | "title":"Improper Isolation of Shared Resources", |
141 | 141 | "caption": "", |
142 | 142 | "description":"A SOC may use pin multiplexing allowing an untrusted agent to access assets/info intended to trusted agents only", |
143 | | - "CWE":"CWE-1189" |
| 143 | + "CWE": ["CWE-1189"] |
144 | 144 | }, |
145 | 145 | { |
146 | 146 | "key":"bac_on_chip_debugger", |
|
162 | 162 | "title":"Cryptographic Implementation", |
163 | 163 | "caption": "", |
164 | 164 | "description":"Assess if the cryptographic algorithm in use is non-standard or a disallowed/non-compliant version.", |
165 | | - "CWE":"CWE-1240" |
| 165 | + "CWE": ["CWE-1240"] |
166 | 166 | }, |
167 | 167 | { |
168 | 168 | "key": "fault_injection_and_side_channel_attacks", |
|
177 | 177 | "title":"Improper Handling of Memory Overlap", |
178 | 178 | "caption": "", |
179 | 179 | "description":"Assess if isolated memory regions and access control policies allow software with low privileges to make changes to overlapping memory also used by software running with higher privileges.", |
180 | | - "CWE":"CWE-1260" |
| 180 | + "CWE": ["CWE-1260"] |
181 | 181 | }, |
182 | 182 | { |
183 | 183 | "key":"clearing_memory_during_state_transition", |
184 | 184 | "title":"Sensitive Information Uncleared Before State Transition", |
185 | 185 | "caption": "", |
186 | 186 | "description":"Assess if sensitive information only needed for one state is cleared after transitioning to the next state, such as during boot or waking up from sleep mode.", |
187 | | - "CWE":"CWE-1272" |
| 187 | + "CWE": ["CWE-1272"] |
188 | 188 | }, |
189 | 189 | { |
190 | 190 | "key":"volatile_memory_boot_code", |
191 | 191 | "title":"Improper Access Control for Volatile Memory for Boot Code", |
192 | 192 | "caption": "", |
193 | 193 | "description":"Assess if the secure boot process can be bypassed to execute untrusted malicious boot code", |
194 | | - "CWE":"CWE-1274" |
| 194 | + "CWE": ["CWE-1274"] |
195 | 195 | }, |
196 | 196 | { |
197 | 197 | "key":"firmware_not_updating", |
198 | 198 | "title":"Firmware Not Getting Updates", |
199 | 199 | "caption": "", |
200 | 200 | "description":"Verify if the firmware can receive regular updates as vulnerabilities are discovered in the future.", |
201 | | - "CWE":"CWE-1277" |
| 201 | + "CWE": ["CWE-1277"] |
202 | 202 | }, |
203 | 203 | { |
204 | 204 | "key":"root_shell", |
|
0 commit comments