CWE-1253

Incorrect Selection of Fuse Values
AI Translation Available

The logic level used to set a system to a secure state relies on a fuse being unblown.

Status
draft
Abstraction
base

Fuses are often used to store secret data, including security configuration data. When not blown, a fuse is considered to store a logic 0, and, when blown, it indicates a logic 1. Fuses are generally considered to be one-directional, i.e., once blown to logic 1, it cannot be reset to logic 0.

Common Consequences

access control authorization availability confidentiality integrity
Impacts
bypass protection mechanism gain privileges or assume identity dos: crash, exit, or restart read memory modify memory execute unauthorized code or commands

Potential Mitigations

Phases:
architecture and design
Descriptions:
• Logic should be designed in a way that blown fuses do not put the product into an insecure state that can be leveraged by an attacker.