CWE-1273 covers device unlock credentials that are shared across multiple parties and may therefore be exposed. It is a supply chain problem for hardware, and a useful lesson for any secret that has to travel.
How it happens
Unlocking a device usually means activating unadvertised debug and manufacturer specific capabilities with sensitive credentials. It may be needed to troubleshoot. MITRE gives an example: a device can dump the full system memory by disabling memory protection. That is so sensitive it is locked in the production part, and only the right credentials unlock it.
If the chip designer, the fabricator and the test and assembly teams all work for one company, the risk of compromise is low. If the designer is one company, the foundry another and the assemblers a third, each needs to run tests and so each needs the unlock key. Their secrecy practices and policies may differ widely, which raises the chance the credential leaks.
What an attacker gains
The recorded consequences are extensive and rated high: reading and modifying memory, files and application data, executing unauthorized code, gaining privileges, and bypassing protection. A leaked unlock credential gives the attacker the debug powers meant for the factory.
How to find it
The record lists no detection methods. Map every party that holds the unlock credential, and ask whether the same key works across all devices and all parties. Shared, long lived keys are the red flag.
How to fix it
MITRE gives no mitigation text. The description points toward limiting how widely any single credential is shared.
- Reduce the number of parties that need the unlock key.
- Avoid one credential that opens every unit, so a leak in one place does not expose all devices.
- Agree handling requirements with each partner, and verify them.
- Make sure production parts stay locked after testing finishes.
Quick check
Why does the number of companies matter?
Each company applies its own level of secrecy and policy, so more parties means more chances for the shared credential to be compromised.
