名称: Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List

CWE entries in this view are listed in the 2025 CWE Most Important Hardware Weaknesses List, as determined by the Hardware CWE Special Interest Group (HW CWE SIG). The 2025 MIHW aims to drive awareness of critical hardware weaknesses and provide the cybersecurity community with practical guidance to prevent security issues at the source. By combining advanced data analysis with expert consensus, the list helps organizations prioritize mitigations, strengthen design practices, and make informed decisions throughout the hardware lifecycle.

CWE 成员

CWE-226: Sensitive Information in Resource Not Removed Before Reuse 基础

CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) 基础

CWE-1191: On-Chip Debug and Test Interface With Improper Access Control 基础

CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks 基础

CWE-1247: Improper Protection Against Voltage and Clock Glitches 基础

CWE-1256: Improper Restriction of Software Interfaces to Hardware Features 基础

CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges 基础

CWE-1262: Improper Access Control for Register Interface 基础

CWE-1300: Improper Protection of Physical Side Channels 基础

CWE-1421: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution 基础

CWE-1423: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution 基础

CWE-1433: 2025 MIHW Supplement: Expert Insights 类别

CWE-1433: Weaknesses in this category were not included in the 2025 Most Important Hardware Weaknesses (MIHW) because they did not have sufficient weakness data to support their inclusion. However, they stand out as expert-driven selections. Each of these weaknesses received high scores from Subject Matter Experts, reflecting strong consensus among those with deep domain knowledge.

CWE-1231: Improper Prevention of Lock Bit Modification 基础

CWE-1233: Security-Sensitive Hardware Controls with Missing Lock Bit Protection 基础

CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State 基础

CWE-1272: Sensitive Information Uncleared Before Debug/Power State Transition 基础

CWE-1431: Driving Intermediate Cryptographic State/Results to Hardware Module Outputs 基础

CWE 视图信息

漏洞映射说明

依据 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
备注 : Use this View or other Views to search and navigate for the appropriate weakness.

目标受众

利益相关方	描述
Hardware Designers	Address key security weaknesses during hardware design process.
Product Customers	Evaluate products for critical security weaknesses and enforce supplier security standards.
Applied Researchers	Investigate selected weaknesses and develop new mitigation strategies.
Academic Researchers	Identify gaps in foundational security models to develop advanced approaches.
Assessment Teams	Focus testing on high-priority hardware security weaknesses.
Assessment Tool Vendors	Improve automated tools to detect critical security weaknesses.
Educators	Structure course content and research projects around hardware security weaknesses.

提交记录

名称	组织	日期	发布日期	Version
CWE Content Team	MITRE	2025-09-06 +00:00	2025-09-09 +00:00	4.18

参考资料

REF-1480

2025 CWE Most Important Hardware Weaknesses
MITRE.
https://cwe.mitre.org/topHW/index.html

REF-1483

2025 CWE MIHW Suggested Use Cases
MITRE.
https://cwe.mitre.org/topHW/archive/2025/2025_MIHW_use_cases

CWE-1432 视图详情

CWE-1432