CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy
An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.
Last updated
Overview
To ensure the performance and functional reliability of certain components, hardware designers can implement hardware blocks for redundancy in the case that others fail. This redundant block can be prevented from performing as intended if the design allows unauthorized agents to inject errors into it. In this way, a path with injected errors may become unavailable to serve as a redundant channel. This may put the system into a degraded mode of operation which could be exploited by a subsequent attack.
Real-world CVEs
2 recorded CVEs are caused by CWE-1334 (Unauthorized Error Injection Can Degrade Hardware Redundancy). The highest-severity and most recent are shown first. 1 new CWE-1334 CVE has been recorded so far in 2026.
Common consequences
What can happen when CWE-1334 is exploited.
DoS: Crash, Exit, or Restart, DoS: Instability, Quality Degradation, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other), Reduce Performance, Reduce Reliability, Unexpected State
Affects: Integrity, Availability
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
How to prevent it
Practical mitigations for CWE-1334, grouped by where in the lifecycle they apply.
Ensure the design does not allow error injection in modes intended for normal run-time operation. Provide access controls on interfaces for injecting errors.
Disallow error injection in modes which are expected to be used for normal run-time operation. Provide access controls on interfaces for injecting errors.
Add an access control layer atop any unprotected interfaces for injecting errors.
Attack patterns
CAPEC attack patterns that exploit this weakness.
Frequently asked questions
Common questions about CWE-1334.
- What is CWE-1334?
- An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.
- What CVEs are caused by CWE-1334?
- 2 recorded CVEs are attributed to CWE-1334, including CVE-2018-25159, CVE-2022-41804.
- How do you prevent CWE-1334?
- Ensure the design does not allow error injection in modes intended for normal run-time operation. Provide access controls on interfaces for injecting errors.
- What are the consequences of CWE-1334?
- Exploiting CWE-1334 can lead to: DoS: Crash, Exit, or Restart, DoS: Instability, Quality Degradation, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other).
- Is CWE-1334 actively exploited?
- 2 recorded CVEs are caused by CWE-1334; none are currently in CISA's KEV catalog of actively exploited flaws.
References
- MITRE CWE definition (CWE-1334) (opens in a new tab)
- CWE-1334 vulnerabilities on NVD (opens in a new tab)
- Learn: What is a CWE?
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.
Stay ahead of CWE-1334
Get alerted the moment a new CWE-1334 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.