CWE-1189
Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
AI Translation Available
The System-On-a-Chip (SoC) does not properly isolate shared resources between trusted and untrusted agents.
Status
stable
Abstraction
base
Affected Platforms
System on Chip
Extended Description
AI Translation
A System-On-a-Chip (SoC) has a lot of functionality, but it may have a limited number of pins or pads. A pin can only perform one function at a time. However, it can be configured to perform multiple different functions. This technique is called pin multiplexing. Similarly, several resources on the chip may be shared to multiplex and support different features or functions. When such resources are shared between trusted and untrusted agents, untrusted agents may be able to access the assets intended to be accessed only by the trusted agents.
Technical Details
AI Translation
Common Consequences
access control
integrity
Impacts
bypass protection mechanism
quality degradation
Detection Methods
automated dynamic analysis
Potential Mitigations
Phases:
architecture and design
Descriptions:
•
When sharing resources, avoid mixing agents of varying trust levels.
Untrusted agents should not share resources with trusted agents.