CWE-1358
Weaknesses in SEI ETF Categories of Security Vulnerabilities in ICS
2022-03-09 +00:00
Thông báo cho một CWE
Luôn được thông báo về mọi thay đổi đối với một CWE cụ thể.
Tên: Weaknesses in SEI ETF Categories of Security Vulnerabilities in ICS
CWE entries in this view (graph) are associated with the Categories of Security Vulnerabilities in ICS, as published by the Securing Energy Infrastructure Executive Task Force (SEI ETF) in March 2022. Weaknesses and categories in this view are focused on issues that affect ICS (Industrial Control Systems) but have not been traditionally covered by CWE in the past due to its earlier emphasis on enterprise IT software. Note: weaknesses in this view are based on "Nearest IT Neighbor" recommendations and other suggestions by the CWE team. These relationships are likely to change in future CWE versions.
Thành viên CWE
CWE-1359: ICS Communications Danh mục
CWE-1360: ICS Dependencies (& Architecture) Danh mục
CWE-1361: ICS Supply Chain Danh mục
CWE-1362: ICS Engineering (Constructions/Deployment) Danh mục
CWE-1363: ICS Operations (& Maintenance) Danh mục
Thông tin chế độ xem CWE
Ghi chú ánh xạ lỗ hổng
Lý do : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.Bình luận : Use this View or other Views to search and navigate for the appropriate weakness.
Đối tượng
| Bên liên quan | Mô tả |
|---|---|
| Hardware Designers | ICS/OT hardware designers can use this view to ensure a minimal set of weaknesses that should be avoided or mitigated during the design process. |
| Product Vendors | Product vendors can use this view to ensure that all aspects of the product lifecycle address these weaknesses. |
| Assessment Tool Vendors | Assessment tool vendors that help to assess potential weaknesses, or avoid them, can use this view to improve their tool's coverage to address more weaknesses. |
| Academic Researchers | Academic researchers can use this view to identify potential research opportunities that could produce better methods for detection or avoidance of weaknesses in ICS/OT products. |
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành | Version |
|---|---|---|---|---|
| New Categories of Security Vulnerabilities (NCSV) Technical Project Team (TPT) | Securing Energy Infrastructure Executive Task Force | 4.7 |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| CWE Content Team | MITRE | updated Maintenance_Notes, Relationship_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Maintenance_Notes, Relationship_Notes |
Tài liệu tham khảo
REF-1248
Categories of Security Vulnerabilities in ICSSecuring Energy Infrastructure Executive Task Force (SEI ETF).
https://secureenergy.inl.gov/content/uploads/27/2024/12/SEI-ETF-NCSV-TPT-Categories-of-Security-Vulnerabilities-ICS-v1_03-09-22.pdf
