CWE-1278: Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques
Filter
Information stored in hardware may be recovered by an attacker with the capability to capture and analyze images of the integrated circuit using techniques such as scanning electron microscopy.
What the weakness is: CWE-1278 at MITRE. All weaknesses
Related attack patterns (CAPEC): 3
- CAPEC-37 Retrieve Embedded Sensitive Data Likelihood: High · Severity: Very High
- CAPEC-188 Reverse Engineering Likelihood: Low · Severity: Low
- CAPEC-545 Pull Data from System Resources
The attack patterns MITRE's CAPEC relates to CWE-1278, as MITRE names them. Credits.
Ask an AI about CWE-1278
Show the prompt
Explain CWE-1278: Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1278.html and https://cve.bz/cve/cwe/1278?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.4CVE-2021-38394EPSS 0.2%
An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to s…