CWE-1253

Incorrect Selection of Fuse Values
AI Translation Available

The logic level used to set a system to a secure state relies on a fuse being unblown.

Status
draft
Abstraction
base

Fuses are often used to store secret data, including security configuration data. When not blown, a fuse is considered to store a logic 0, and, when blown, it indicates a logic 1. Fuses are generally considered to be one-directional, i.e., once blown to logic 1, it cannot be reset to logic 0.

Common Consequences

access control authorization availability confidentiality integrity
Impacts
execute unauthorized code or commands bypass protection mechanism gain privileges or assume identity dos: crash, exit, or restart read memory modify memory

Potential Mitigations

Phases:
architecture and design
Descriptions:
• Logic should be designed in a way that blown fuses do not put the product into an insecure state that can be leveraged by an attacker.