이름: Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List

CWE entries in this view are listed in the 2025 CWE Most Important Hardware Weaknesses List, as determined by the Hardware CWE Special Interest Group (HW CWE SIG). The 2025 MIHW aims to drive awareness of critical hardware weaknesses and provide the cybersecurity community with practical guidance to prevent security issues at the source. By combining advanced data analysis with expert consensus, the list helps organizations prioritize mitigations, strengthen design practices, and make informed decisions throughout the hardware lifecycle.

CWE 구성원

CWE-226: Sensitive Information in Resource Not Removed Before Reuse 기본

CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) 기본

CWE-1191: On-Chip Debug and Test Interface With Improper Access Control 기본

CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks 기본

CWE-1247: Improper Protection Against Voltage and Clock Glitches 기본

CWE-1256: Improper Restriction of Software Interfaces to Hardware Features 기본

CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges 기본

CWE-1262: Improper Access Control for Register Interface 기본

CWE-1300: Improper Protection of Physical Side Channels 기본

CWE-1421: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution 기본

CWE-1423: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution 기본

CWE-1433: 2025 MIHW Supplement: Expert Insights 카테고리

CWE-1433: Weaknesses in this category were not included in the 2025 Most Important Hardware Weaknesses (MIHW) because they did not have sufficient weakness data to support their inclusion. However, they stand out as expert-driven selections. Each of these weaknesses received high scores from Subject Matter Experts, reflecting strong consensus among those with deep domain knowledge.

CWE-1231: Improper Prevention of Lock Bit Modification 기본

CWE-1233: Security-Sensitive Hardware Controls with Missing Lock Bit Protection 기본

CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State 기본

CWE-1272: Sensitive Information Uncleared Before Debug/Power State Transition 기본

CWE-1431: Driving Intermediate Cryptographic State/Results to Hardware Module Outputs 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

대상

이해관계자	설명
Hardware Designers	Address key security weaknesses during hardware design process.
Product Customers	Evaluate products for critical security weaknesses and enforce supplier security standards.
Applied Researchers	Investigate selected weaknesses and develop new mitigation strategies.
Academic Researchers	Identify gaps in foundational security models to develop advanced approaches.
Assessment Teams	Focus testing on high-priority hardware security weaknesses.
Assessment Tool Vendors	Improve automated tools to detect critical security weaknesses.
Educators	Structure course content and research projects around hardware security weaknesses.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2025-09-06 +00:00	2025-09-09 +00:00	4.18

참고 자료

REF-1480

2025 CWE Most Important Hardware Weaknesses
MITRE.
https://cwe.mitre.org/topHW/index.html

REF-1483

2025 CWE MIHW Suggested Use Cases
MITRE.
https://cwe.mitre.org/topHW/archive/2025/2025_MIHW_use_cases

CWE-1432 뷰 상세 정보

CWE-1432