繁體中文

CWE-1194 檢視詳細資料

CWE-1194

Hardware Design
2019-12-27 +00:00
Draft
Graph
2026-10-28 +00:00
CWE Mitre.org
指定 CWE 通知
掌握特定 CWE 的任何變更。
管理通知

名稱: Hardware Design

This view organizes weaknesses around concepts that are frequently used or encountered in hardware design. Accordingly, this view can align closely with the perspectives of designers, manufacturers, educators, and assessment vendors. It provides a variety of categories that are intended to simplify navigation, browsing, and mapping.

CWE 成員

CWE-1198: Weaknesses in this category are related to features and mechanisms providing hardware-based isolation and access control (e.g., identity, policy, locking control) of sensitive shared hardware resources such as registers and fuses.
CWE-276: Incorrect Default Permissions 基礎
CWE-441: Unintended Proxy or Intermediary 基礎
CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) 基礎
CWE-1192: Improper Identifier for IP Block used in System-On-Chip (SOC) 基礎
CWE-1220: Insufficient Granularity of Access Control 基礎
CWE-1222: Insufficient Granularity of Address Regions Protected by Register Locks 基礎
CWE-1242: Inclusion of Undocumented Features or Chicken Bits 基礎
CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges 基礎
CWE-1262: Improper Access Control for Register Interface 基礎
CWE-1267: Policy Uses Obsolete Encoding 基礎
CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents 基礎
CWE-1280: Access Control Check Implemented After Asset is Accessed 基礎
CWE-1294: Insecure Security Identifier Mechanism 基礎
CWE-1299: Missing Protection Mechanism for Alternate Hardware Interface 基礎
CWE-1302: Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) 基礎
CWE-1303: Non-Transparent Sharing of Microarchitectural Resources 基礎
CWE-1314: Missing Write Protection for Parametric Data Values 基礎
CWE-1318: Missing Support for Security Features in On-chip Fabrics or Buses 基礎
CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy 基礎
CWE-1420: Exposure of Sensitive Information during Transient Execution 基礎

CWE 檢視資訊

漏洞對應備注

理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
備註 : Use this View or other Views to search and navigate for the appropriate weakness.

備注

This view attempts to present hardware weaknesses in a simple and intuitive way. As such it uses a single level of abstraction. The same category could contain weaknesses that have parent/child relationships within View-1000. By exploring View-1000 relationships for the weaknesses that are included, one can find deeper relationships between some hardware weaknesses.
The top level categories in this view represent commonly understood areas/terms within hardware design, and are meant to aid the user in identifying potential related weaknesses. It is possible for the same weakness to exist within multiple different categories.

受眾

相關方 描述
Hardware Designers Hardware Designers use this view to better understand potential mistakes that can be made in specific areas of their IP design. The use of concepts with which hardware designers are familiar makes it easier to navigate.
Educators Educators use this view to teach future professionals about the types of mistakes that are commonly made in hardware design.

提交

名稱 機構 日期 發布日期 Version
CWE Content Team MITRE 2019-12-27 +00:00 2020-02-24 +00:00 4.0

修改記錄

名稱 機構 日期 備註
CWE Content Team MITRE 2022-06-28 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2026-10-28 +00:00 updated Other_Notes, Relationship_Notes
cvefind.com 上呈現的資訊來自多個精心挑選的參考來源。CVE 資料由 MITRE Corporation 和 國家漏洞資料庫（NVD）提供。已知被利用漏洞（KEV）目錄來自 網路安全暨基礎設施安全局（CISA），而 EPSS 評分來自 FIRST.org。此外，軟體弱點（CWE）和常見攻擊模式（CAPEC）的資料由 MITRE Corporation 維護，硬軟體配置（CPE）資訊由 NVD 提供。