이름: Security Flow Issues

Weaknesses in this category are related to improper design of full-system security flows, including but not limited to secure boot, secure update, and hardware-device attestation.

CWE 구성원 목록

CWE-1190: DMA Device Enabled Too Early in Boot Phase 기본

CWE-1193: Power-On of Untrusted Execution Core Before Enabling Fabric Access Control 기본

CWE-1264: Hardware Logic with Insecure De-Synchronization between Control and Data Channels 기본

CWE-1274: Improper Access Control for Volatile Memory Containing Boot Code 기본

CWE-1283: Mutable Attestation or Measurement Reporting Data 기본

CWE-1310: Missing Ability to Patch ROM Code 기본

CWE-1326: Missing Immutable Root of Trust in Hardware 기본

CWE-1328: Security Version Number Mutable to Older Versions 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2019-12-27 +00:00	2020-02-24 +00:00	4.0

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2020-06-25 +00:00	updated Relationships
CWE Content Team	MITRE	2020-12-10 +00:00	updated Relationships
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

CWE-1196 카테고리 상세 정보

CWE-1196