CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic
Filter
Faulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain privileges on the victim's system.
What the weakness is: CWE-1245 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-74 Manipulating State Likelihood: Medium · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-1245, as MITRE names them. Credits.
Ask an AI about CWE-1245
Show the prompt
Explain CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1245.html and https://cve.bz/cve/cwe/1245?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.0CVE-2025-48508EPSS 0.2%
Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or reset resulting in denial of service.
- 8.7CVE-2024-58311EPSS 0.4%
Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating va…
- 5.6CVE-2024-31068EPSS 0.2%
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via local access.
- 5.7CVE-2024-21853EPSS 0.2%
Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorized user to potentially enable denial of service via local access.
- 5.6CVE-2024-24968EPSS 0.2%
Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access.