CWE Code: 668
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Exposure of Resource to Wrong Sphere
Summary: the arm-based hardware debugging feature on raspberry pi 3 module b+ and possibly other devices allows non-secure el1 code to read/write any el3 (the highest privilege level in armv8) memory/register via inter-processor debugging. with a debug host processor a running in non-secure el1 and a debug target processor b running in any privilege level, the debugging feature allows a to halt b and promote b to any privilege level. as a debug host, a has full control of b even if b owns a higher privilege level than a. accordingly, a can read/write any el3 memory/register via b. also, with this memory access, a can execute arbitrary code in el3.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-04-04
Last Modified Date: 2019-10-03