CWE-1059
Insufficient Technical Documentation
2019-01-03
00h00 +00:00
00h00 +00:00
Thông báo cho một CWE
Luôn được thông báo về mọi thay đổi đối với một CWE cụ thể.
Tên: Insufficient Technical Documentation
The product does not contain sufficient
technical or engineering documentation (whether on paper or
in electronic form) that contains descriptions of all of the
relevant software/hardware elements of the product.
Thông tin chung
Các cách xuất hiện
Architecture and DesignDocumentation
Nền tảng áp dụng
Ngôn ngữ
Lớp: Not Language-Specific (Undetermined)Hệ điều hành
Lớp: Not OS-Specific (Undetermined)Kiến trúc
Lớp: Not Architecture-Specific (Undetermined)Công nghệ
Lớp: Not Technology-Specific (Undetermined)Lớp: ICS/OT (Undetermined)
Hậu quả phổ biến
| Phạm vi | Tác động | Khả năng xảy ra |
|---|---|---|
| Other | Varies by Context, Hide Activities, Reduce Reliability, Quality Degradation, Reduce Maintainability |
Ví dụ đã quan sát
| Tài liệu tham khảo | Mô tả |
|---|---|
CVE-2022-3203 | A wireless access point manual specifies that the only method of configuration is via web interface (CWE-1059), but there is an undisclosed telnet server that was activated by default (CWE-912). |
Các biện pháp giảm thiểu tiềm năng
Phases : Documentation // Architecture and DesignEnsure that design documentation is detailed enough to allow for post-manufacturing verification.
Ghi chú ánh xạ lỗ hổng
Lý do : This entry is primarily a quality issue with no direct security implications.Bình luận : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
Tài liệu tham khảo
REF-1248
Categories of Security Vulnerabilities in ICSSecuring Energy Infrastructure Executive Task Force (SEI ETF).
https://secureenergy.inl.gov/content/uploads/27/2024/12/SEI-ETF-NCSV-TPT-Categories-of-Security-Vulnerabilities-ICS-v1_03-09-22.pdf
REF-1254
Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions Draft Guidance for Industry and Food and Drug Administration Staff (DRAFT GUIDANCE)FDA.
https://www.fda.gov/media/119933/download
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Description, Name, Potential_Mitigations, References, Relationships, Time_of_Introduction | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships | |
| CWE Content Team | MITRE | updated Relationships, Taxonomy_Mappings | |
| CWE Content Team | MITRE | updated Mapping_Notes, Taxonomy_Mappings | |
| CWE Content Team | MITRE | updated Observed_Examples | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Common_Consequences, Description, Technical_Nuance |
