CWE-1059 详情

The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains descriptions of all of the relevant software/hardware elements of the product.

引入方式

Architecture and Design
Documentation

适用平台

编程语言

类： Not Language-Specific (Undetermined)

操作系统

类： Not OS-Specific (Undetermined)

架构

类： Not Architecture-Specific (Undetermined)

技术

类： Not Technology-Specific (Undetermined)
类： ICS/OT (Undetermined)

常见后果

观察示例

潜在缓解措施

Phases : Documentation // Architecture and Design
Ensure that design documentation is detailed enough to allow for post-manufacturing verification.

漏洞映射说明

依据 : This entry is primarily a quality issue with no direct security implications.
备注 : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.

参考资料

REF-1248

Categories of Security Vulnerabilities in ICS
Securing Energy Infrastructure Executive Task Force (SEI ETF).
https://secureenergy.inl.gov/content/uploads/27/2024/12/SEI-ETF-NCSV-TPT-Categories-of-Security-Vulnerabilities-ICS-v1_03-09-22.pdf

REF-1254

Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions Draft Guidance for Industry and Food and Drug Administration Staff (DRAFT GUIDANCE)
FDA.
https://www.fda.gov/media/119933/download

提交记录

修改记录