cve.bz

CWE-1297: Unprotected Confidential Information on Device is Accessible by OSAT Vendors

Filter

The product does not adequately protect confidential information on the device from being accessed by Outsourced Semiconductor Assembly and Test (OSAT) vendors.

What the weakness is: CWE-1297 at MITRE. All weaknesses

Related attack patterns (CAPEC): 2
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High
  • CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels Likelihood: High · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-1297, as MITRE names them. Credits.

Ask an AI about CWE-1297

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1297: Unprotected Confidential Information on Device is Accessible by OSAT Vendors and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1297.html and https://cve.bz/cve/cwe/1297?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

No records match.