CWE-1194 Weergavedetail

CWE-1194

Hardware Design
Draft
Graph
2019-12-27 +00:00
2023-06-29 +00:00
CWE Mitre.org
Meldingen voor een CWE
Blijf op de hoogte van wijzigingen voor een specifieke CWE.
Meldingen beheren

Naam: Hardware Design

This view organizes weaknesses around concepts that are frequently used or encountered in hardware design. Accordingly, this view can align closely with the perspectives of designers, manufacturers, educators, and assessment vendors. It provides a variety of categories that are intended to simplify navigation, browsing, and mapping.

CWE-leden

CWE-1198: Weaknesses in this category are related to features and mechanisms providing hardware-based isolation and access control (e.g., identity, policy, locking control) of sensitive shared hardware resources such as registers and fuses.
CWE-276: Incorrect Default Permissions Base
CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') Base
CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) Base
CWE-1192: Improper Identifier for IP Block used in System-On-Chip (SOC) Base
CWE-1220: Insufficient Granularity of Access Control Base
CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks Base
CWE-1242: Inclusion of Undocumented Features or Chicken Bits Base
CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges Base
CWE-1262: Improper Access Control for Register Interface Base
CWE-1267: Policy Uses Obsolete Encoding Base
CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents Base
CWE-1280: Access Control Check Implemented After Asset is Accessed Base
CWE-1294: Insecure Security Identifier Mechanism Base
CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface Base
CWE-1302: Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) Base
CWE-1303: Non-Transparent Sharing of Microarchitectural Resources Base
CWE-1314: Missing Write Protection for Parametric Data Values Base
CWE-1318: Missing Support for Security Features in On-chip Fabrics or Buses Base
CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy Base
CWE-1420: Exposure of Sensitive Information during Transient Execution Base

CWE-weergave-informatie

Notities kwetsbaarheidsmapping

Rechtvaardiging : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Opmerking : Use this View or other Views to search and navigate for the appropriate weakness.

Notities

The top level categories in this view represent commonly understood areas/terms within hardware design, and are meant to aid the user in identifying potential related weaknesses. It is possible for the same weakness to exist within multiple different categories.
This view attempts to present weaknesses in a simple and intuitive way. As such it targets a single level of abstraction. It is important to realize that not every CWE will be represented in this view. High-level class weaknesses and low-level variant weaknesses are mostly ignored. However, by exploring the weaknesses that are included, and following the defined relationships, one can find these higher and lower level weaknesses.

Doelgroep

Belanghebbende Beschrijving
Hardware Designers Hardware Designers use this view to better understand potential mistakes that can be made in specific areas of their IP design. The use of concepts with which hardware designers are familiar makes it easier to navigate.
Educators Educators use this view to teach future professionals about the types of mistakes that are commonly made in hardware design.

Indiening

Naam Organisatie Datum Releasedatum Version
CWE Content Team MITRE 2019-12-27 +00:00 2020-02-24 +00:00 4.0

Wijzigingen

Naam Organisatie Datum Opmerking
CWE Content Team MITRE 2022-06-28 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
De informatie die op CVE Find wordt gepresenteerd, is afkomstig van verschillende zorgvuldig geselecteerde referentiebronnen. CVE-gegevens worden geleverd door MITRE Corporation en de National Vulnerability Database (NVD). De Known Exploited Vulnerabilities (KEV)-catalogus is afkomstig van de Cybersecurity and Infrastructure Security Agency (CISA), terwijl EPSS-scores afkomstig zijn van FIRST.org. Daarnaast worden gegevens over softwarezwakheden (CWE) en veelvoorkomende aanvalspatronen (CAPEC) bijgehouden door MITRE Corporation, en informatie over hardware- en softwareconfiguraties (CPE) wordt geleverd door de NVD.