Detail Tampilan CWE-1432

CWE-1432

Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List
2025-09-06 +00:00
Stable
Graph
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List

CWE entries in this view are listed in the 2025 CWE Most Important Hardware Weaknesses List, as determined by the Hardware CWE Special Interest Group (HW CWE SIG). The 2025 MIHW aims to drive awareness of critical hardware weaknesses and provide the cybersecurity community with practical guidance to prevent security issues at the source. By combining advanced data analysis with expert consensus, the list helps organizations prioritize mitigations, strengthen design practices, and make informed decisions throughout the hardware lifecycle.

Anggota CWE

CWE-226: Sensitive Information in Resource Not Removed Before Reuse Dasar

CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) Dasar

CWE-1191: On-Chip Debug and Test Interface With Improper Access Control Dasar

CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks Dasar

CWE-1247: Improper Protection Against Voltage and Clock Glitches Dasar

CWE-1256: Improper Restriction of Software Interfaces to Hardware Features Dasar

CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges Dasar

CWE-1262: Improper Access Control for Register Interface Dasar

CWE-1300: Improper Protection of Physical Side Channels Dasar

CWE-1421: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution Dasar

CWE-1423: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Audiens

Pemangku kepentingan Deskripsi
Hardware Designers Address key security weaknesses during hardware design process.
Product Customers Evaluate products for critical security weaknesses and enforce supplier security standards.
Applied Researchers Investigate selected weaknesses and develop new mitigation strategies.
Academic Researchers Identify gaps in foundational security models to develop advanced approaches.
Assessment Teams Focus testing on high-priority hardware security weaknesses.
Assessment Tool Vendors Improve automated tools to detect critical security weaknesses.
Educators Structure course content and research projects around hardware security weaknesses.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2025-09-06 +00:00 2025-09-09 +00:00 4.18

Referensi

REF-1480

2025 CWE Most Important Hardware Weaknesses
MITRE.
https://cwe.mitre.org/topHW/index.html

REF-1483

2025 CWE MIHW Suggested Use Cases
MITRE.
https://cwe.mitre.org/topHW/archive/2025/2025_MIHW_use_cases

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.