日本語

CWE-1432 ビュー詳細

CWE-1432

Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List
2025-09-06 +00:00
Stable
Graph
CWE Mitre.org
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
通知を管理する

名前: Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List

CWE entries in this view are listed in the 2025 CWE Most Important Hardware Weaknesses List, as determined by the Hardware CWE Special Interest Group (HW CWE SIG). The 2025 MIHW aims to drive awareness of critical hardware weaknesses and provide the cybersecurity community with practical guidance to prevent security issues at the source. By combining advanced data analysis with expert consensus, the list helps organizations prioritize mitigations, strengthen design practices, and make informed decisions throughout the hardware lifecycle.

CWE メンバー

CWE-226: Sensitive Information in Resource Not Removed Before Reuse ベース

CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) ベース

CWE-1191: On-Chip Debug and Test Interface With Improper Access Control ベース

CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks ベース

CWE-1247: Improper Protection Against Voltage and Clock Glitches ベース

CWE-1256: Improper Restriction of Software Interfaces to Hardware Features ベース

CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges ベース

CWE-1262: Improper Access Control for Register Interface ベース

CWE-1300: Improper Protection of Physical Side Channels ベース

CWE-1421: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution ベース

CWE-1423: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution ベース

CWE ビュー情報

脆弱性マッピングノート

理由 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
コメント : Use this View or other Views to search and navigate for the appropriate weakness.

対象者

ステークホルダー 説明
Hardware Designers Address key security weaknesses during hardware design process.
Product Customers Evaluate products for critical security weaknesses and enforce supplier security standards.
Applied Researchers Investigate selected weaknesses and develop new mitigation strategies.
Academic Researchers Identify gaps in foundational security models to develop advanced approaches.
Assessment Teams Focus testing on high-priority hardware security weaknesses.
Assessment Tool Vendors Improve automated tools to detect critical security weaknesses.
Educators Structure course content and research projects around hardware security weaknesses.

登録情報

名前 組織 日付 リリース日 Version
CWE Content Team MITRE 2025-09-06 +00:00 2025-09-09 +00:00 4.18

参考文献

REF-1480

2025 CWE Most Important Hardware Weaknesses
MITRE.
https://cwe.mitre.org/topHW/index.html

REF-1483

2025 CWE MIHW Suggested Use Cases
MITRE.
https://cwe.mitre.org/topHW/archive/2025/2025_MIHW_use_cases

CVE Findに掲載されている情報は、慎重に選定された複数の参照ソースから取得されています。CVEデータはMITRE Corporationおよび国家脆弱性データベース（NVD）が提供しています。既知の悪用された脆弱性（KEV）カタログはサイバーセキュリティ・インフラセキュリティ庁（CISA）から、EPSSスコアはFIRST.orgから取得しています。また、ソフトウェアの弱点（CWE）および共通攻撃パターン（CAPEC）に関するデータはMITRE Corporationが管理し、ハードウェアおよびソフトウェア構成（CPE）に関する情報はNVDが提供しています。