日本語

CWE-1460 ビュー詳細

CWE-1460

Weaknesses Addressed by the Top 20 Secure PLC Coding Practices
2026-10-07 +00:00
Stable
Explicit
CWE Mitre.org
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
通知を管理する

名前: Weaknesses Addressed by the Top 20 Secure PLC Coding Practices

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the Top 20 Secure PLC Coding Practices, as published by the Secure PLC Programming project in 2021.

CWE メンバー

CWE-1120: Excessive Code Complexity ベース

CWE-128: Wrap-around Error ベース

CWE-129: Improper Validation of Array Index ベース

CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals ベース

CWE-190: Integer Overflow or Wraparound ベース

CWE-345: Insufficient Verification of Data Authenticity ベース

CWE-353: Missing Support for Integrity Check ベース

CWE-354: Improper Validation of Integrity Check Value ベース

CWE-369: Divide By Zero ベース

CWE-653: Improper Isolation or Compartmentalization ベース

CWE-754: Improper Check for Unusual or Exceptional Conditions ベース

CWE-778: Insufficient Logging ベース

CWE-787: Out-of-bounds Write ベース

CWE ビュー情報

脆弱性マッピングノート

理由 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
コメント : Use this View or other Views to search and navigate for the appropriate weakness.

ノート

The relationships in this view were determined based on specific statements within the rules from the practices. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.
Some of the rules in the guide did not have clear relationships to existing CWE entries. This suggests that there might be gaps in CWE, or some of the practices in the PLC Top 20 are not specific to weaknesses.

対象者

ステークホルダー 説明
Software Developers By following the practices in the list, PLC developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the guide, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers If a developer claims to be following these practices, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to these practices.

登録情報

名前 組織 日付 リリース日 Version
CWE Content Team MITRE 2026-10-07 +00:00 2026-10-28 +00:00 5.0

参考文献

REF-1550

Secure PLC Coding Practices: Top 20 List
Secure PLC Programming project.
https://plc-security.com/

CVE Findに掲載されている情報は、慎重に選定された複数の参照ソースから取得されています。CVEデータはMITRE Corporationおよび国家脆弱性データベース（NVD）が提供しています。既知の悪用された脆弱性（KEV）カタログはサイバーセキュリティ・インフラセキュリティ庁（CISA）から、EPSSスコアはFIRST.orgから取得しています。また、ソフトウェアの弱点（CWE）および共通攻撃パターン（CAPEC）に関するデータはMITRE Corporationが管理し、ハードウェアおよびソフトウェア構成（CPE）に関する情報はNVDが提供しています。