CWE-1278Base

Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques

Incomplete in the CWE catalog · 1 CVE mapped

1
CVEs mapped
6.2
Median CVSS
What it is

Information stored in hardware may be recovered by an attacker with the capability to capture and analyze images of the integrated circuit using techniques such as scanning electron microscopy.

Recent examples
6.2cvss
CVE-2021-38394

Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-1278
Abstraction
Base
Structure
Simple
Status
Incomplete
References (2)