日本語

CWE-1194 ビュー詳細

CWE-1194

Hardware Design
2019-12-27 +00:00
Draft
Graph
2026-10-28 +00:00
CWE Mitre.org
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
通知を管理する

名前: Hardware Design

This view organizes weaknesses around concepts that are frequently used or encountered in hardware design. Accordingly, this view can align closely with the perspectives of designers, manufacturers, educators, and assessment vendors. It provides a variety of categories that are intended to simplify navigation, browsing, and mapping.

CWE メンバー

CWE-1198: Weaknesses in this category are related to features and mechanisms providing hardware-based isolation and access control (e.g., identity, policy, locking control) of sensitive shared hardware resources such as registers and fuses.
CWE-276: Incorrect Default Permissions ベース
CWE-441: Unintended Proxy or Intermediary ベース
CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) ベース
CWE-1192: Improper Identifier for IP Block used in System-On-Chip (SOC) ベース
CWE-1220: Insufficient Granularity of Access Control ベース
CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks ベース
CWE-1242: Inclusion of Undocumented Features or Chicken Bits ベース
CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges ベース
CWE-1262: Improper Access Control for Register Interface ベース
CWE-1267: Policy Uses Obsolete Encoding ベース
CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents ベース
CWE-1280: Access Control Check Implemented After Asset is Accessed ベース
CWE-1294: Insecure Security Identifier Mechanism ベース
CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface ベース
CWE-1302: Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) ベース
CWE-1303: Non-Transparent Sharing of Microarchitectural Resources ベース
CWE-1314: Missing Write Protection for Parametric Data Values ベース
CWE-1318: Missing Support for Security Features in On-chip Fabrics or Buses ベース
CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy ベース
CWE-1420: Exposure of Sensitive Information during Transient Execution ベース

CWE ビュー情報

脆弱性マッピングノート

理由 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
コメント : Use this View or other Views to search and navigate for the appropriate weakness.

ノート

This view attempts to present hardware weaknesses in a simple and intuitive way. As such it uses a single level of abstraction. The same category could contain weaknesses that have parent/child relationships within View-1000. By exploring View-1000 relationships for the weaknesses that are included, one can find deeper relationships between some hardware weaknesses.
The top level categories in this view represent commonly understood areas/terms within hardware design, and are meant to aid the user in identifying potential related weaknesses. It is possible for the same weakness to exist within multiple different categories.

対象者

ステークホルダー 説明
Hardware Designers Hardware Designers use this view to better understand potential mistakes that can be made in specific areas of their IP design. The use of concepts with which hardware designers are familiar makes it easier to navigate.
Educators Educators use this view to teach future professionals about the types of mistakes that are commonly made in hardware design.

登録情報

名前 組織 日付 リリース日 Version
CWE Content Team MITRE 2019-12-27 +00:00 2020-02-24 +00:00 4.0

変更履歴

名前 組織 日付 コメント
CWE Content Team MITRE 2022-06-28 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2026-10-28 +00:00 updated Other_Notes, Relationship_Notes
CVE Findに掲載されている情報は、慎重に選定された複数の参照ソースから取得されています。CVEデータはMITRE Corporationおよび国家脆弱性データベース（NVD）が提供しています。既知の悪用された脆弱性（KEV）カタログはサイバーセキュリティ・インフラセキュリティ庁（CISA）から、EPSSスコアはFIRST.orgから取得しています。また、ソフトウェアの弱点（CWE）および共通攻撃パターン（CAPEC）に関するデータはMITRE Corporationが管理し、ハードウェアおよびソフトウェア構成（CPE）に関する情報はNVDが提供しています。