Detail Kategori CWE-1360

CWE-1360

ICS Dependencies (& Architecture)
2022-04-28 +00:00
Incomplete
2025-12-11 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: ICS Dependencies (& Architecture)

Weaknesses in this category are related to the "ICS Dependencies (& Architecture)" super category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022.

Daftar Anggota CWE

CWE-1368: Weaknesses in this category are related to the "External Digital Systems" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "Due to the highly interconnected technologies in use, an external dependency on another digital system could cause a confidentiality, integrity, or availability incident for the protected system." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.
CWE-15: External Control of System or Configuration Setting Dasar
CWE-287: Improper Authentication Dasar
CWE-306: Missing Authentication for Critical Functionality Dasar
CWE-308: Use of Single-factor Authentication Dasar
CWE-312: Cleartext Storage of Sensitive Information Dasar
CWE-440: Expected Behavior Violation Dasar
CWE-470: Use of Externally-Controlled Input to Select Classes or Code Dasar
CWE-603: Use of Client-Side Authentication Dasar
CWE-610: Externally Controlled Reference to a Resource in Another Sphere Dasar
CWE-638: Not Using Complete Mediation Dasar
CWE-1059: Insufficient Technical Documentation Dasar
CWE-1068: Inconsistency Between Implementation and Documented Design Dasar
CWE-1104: Use of Unmaintained Third Party Components Dasar
CWE-1329: Reliance on Component That is Not Updateable Dasar
CWE-1357: Reliance on Insufficiently Trustworthy Component Dasar
CWE-1393: Use of Default Password Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
New Categories of Security Vulnerabilities (NCSV) Technical Project Team (TPT) Securing Energy Infrastructure Executive Task Force 2022-03-09 +00:00 2022-04-28 +00:00 4.7

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2023-01-31 +00:00 updated Maintenance_Notes, Relationship_Notes
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-09-09 +00:00 updated References
CWE Content Team MITRE 2025-12-11 +00:00 updated Maintenance_Notes, Relationship_Notes

Referensi

REF-1248

Categories of Security Vulnerabilities in ICS
Securing Energy Infrastructure Executive Task Force (SEI ETF).
https://secureenergy.inl.gov/content/uploads/27/2024/12/SEI-ETF-NCSV-TPT-Categories-of-Security-Vulnerabilities-ICS-v1_03-09-22.pdf

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.