名稱: Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List

CWE entries in this view are listed in the 2025 CWE Most Important Hardware Weaknesses List, as determined by the Hardware CWE Special Interest Group (HW CWE SIG). The 2025 MIHW aims to drive awareness of critical hardware weaknesses and provide the cybersecurity community with practical guidance to prevent security issues at the source. By combining advanced data analysis with expert consensus, the list helps organizations prioritize mitigations, strengthen design practices, and make informed decisions throughout the hardware lifecycle.

CWE 成員

CWE-226: Sensitive Information in Resource Not Removed Before Reuse 基礎

CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) 基礎

CWE-1191: On-Chip Debug and Test Interface With Improper Access Control 基礎

CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks 基礎

CWE-1247: Improper Protection Against Voltage and Clock Glitches 基礎

CWE-1256: Improper Restriction of Software Interfaces to Hardware Features 基礎

CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges 基礎

CWE-1262: Improper Access Control for Register Interface 基礎

CWE-1300: Improper Protection of Physical Side Channels 基礎

CWE-1421: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution 基礎

CWE-1423: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution 基礎

CWE-1433: 2025 MIHW Supplement: Expert Insights 類別

CWE-1433: Weaknesses in this category were not included in the 2025 Most Important Hardware Weaknesses (MIHW) because they did not have sufficient weakness data to support their inclusion. However, they stand out as expert-driven selections. Each of these weaknesses received high scores from Subject Matter Experts, reflecting strong consensus among those with deep domain knowledge.

CWE-1231: Improper Prevention of Lock Bit Modification 基礎

CWE-1233: Security-Sensitive Hardware Controls with Missing Lock Bit Protection 基礎

CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State 基礎

CWE-1272: Sensitive Information Uncleared Before Debug/Power State Transition 基礎

CWE-1431: Driving Intermediate Cryptographic State/Results to Hardware Module Outputs 基礎

CWE 檢視資訊

漏洞對應備注

理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
備註 : Use this View or other Views to search and navigate for the appropriate weakness.

受眾

相關方	描述
Hardware Designers	Address key security weaknesses during hardware design process.
Product Customers	Evaluate products for critical security weaknesses and enforce supplier security standards.
Applied Researchers	Investigate selected weaknesses and develop new mitigation strategies.
Academic Researchers	Identify gaps in foundational security models to develop advanced approaches.
Assessment Teams	Focus testing on high-priority hardware security weaknesses.
Assessment Tool Vendors	Improve automated tools to detect critical security weaknesses.
Educators	Structure course content and research projects around hardware security weaknesses.

提交

名稱	機構	日期	發布日期	Version
CWE Content Team	MITRE	2025-09-06 +00:00	2025-09-09 +00:00	4.18

參考資料

REF-1480

2025 CWE Most Important Hardware Weaknesses
MITRE.
https://cwe.mitre.org/topHW/index.html

REF-1483

2025 CWE MIHW Suggested Use Cases
MITRE.
https://cwe.mitre.org/topHW/archive/2025/2025_MIHW_use_cases

CWE-1432 檢視詳細資料

CWE-1432