970 indexed

CWECWE weaknesses

970 MITRE CWE entries — software weakness types that underlie vulnerabilities (CVE→CWE link). Filter by category. Authored by Adam Lundqvist.

Showing 151–200 of 970 · page 4 of 20

IDTitleSummary
CWE-1241Use of Predictable Algorithm in Random Number GeneratorThe device uses an algorithm that is predictable and generates a pseudo-random number.
CWE-1242Inclusion of Undocumented Features or Chicken BitsThe device includes chicken bits or undocumented features that can create entry points for unauthorized actors.
CWE-1243Sensitive Non-Volatile Information Not Protected During DebugAccess to security-sensitive information stored in fuses is not limited during debug.
CWE-1244Internal Asset Exposed to Unsafe Debug Access Level or StateThe product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an i…
CWE-1245Improper Finite State Machines (FSMs) in Hardware LogicFaulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain…
CWE-1246Improper Write Handling in Limited-write Non-Volatile MemoriesThe product does not implement or incorrectly implements wear leveling operations in limited-write non-volatile memories.
CWE-1247Improper Protection Against Voltage and Clock GlitchesThe device does not contain or contains incorrectly implemented circuitry or sensors to detect and mitigate voltage and clock glitches and protect sensitive in…
CWE-1248Semiconductor Defects in Hardware Logic with Security-Sensitive ImplicationsThe security-sensitive hardware module contains semiconductor defects.
CWE-1249Application-Level Admin Tool with Inconsistent View of Underlying Operating SystemThe product provides an application for administrators to manage parts of the underlying operating system, but the application does not accurately identify all…
CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.
CWE-1250Improper Preservation of Consistency Between Independent Representations of Shared StateThe product has or supports multiple distributed components or sub-systems that are each required to keep their own local copy of shared data - such as state o…
CWE-1251Mirrored Regions with Different ValuesThe product's architecture mirrors regions without ensuring that their contents always stay in sync.
CWE-1252CPU Hardware Not Configured to Support Exclusivity of Write and Execute OperationsThe CPU is not configured to provide hardware support for exclusivity of write and execute operations on memory. This allows an attacker to execute data from a…
CWE-1253Incorrect Selection of Fuse ValuesThe logic level used to set a system to a secure state relies on a fuse being unblown.
CWE-1254Incorrect Comparison Logic GranularityThe product's comparison logic is performed over a series of steps rather than across the entire string in one operation. If there is a comparison logic failur…
CWE-1255Comparison Logic is Vulnerable to Power Side-Channel AttacksA device's real time power consumption may be monitored during security token evaluation and the information gleaned may be used to determine the value of the …
CWE-1256Improper Restriction of Software Interfaces to Hardware FeaturesThe product provides software-controllable device functionality for capabilities such as power and clock management, but it does not properly limit fu…
CWE-1257Improper Access Control Applied to Mirrored or Aliased Memory RegionsAliased or mirrored memory regions in hardware designs may have inconsistent read/write permissions enforced by the hardware. A possible result is that an untr…
CWE-1258Exposure of Sensitive System Information Due to Uncleared Debug InformationThe hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.
CWE-1259Improper Restriction of Security Token AssignmentThe System-On-A-Chip (SoC) implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an …
CWE-126Buffer Over-readThe product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
CWE-1260Improper Handling of Overlap Between Protected Memory RangesThe product allows address regions to overlap, which can result in the bypassing of intended memory protection.
CWE-1261Improper Handling of Single Event UpsetsThe hardware logic does not effectively handle when single-event upsets (SEUs) occur.
CWE-1262Improper Access Control for Register InterfaceThe product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those re…
CWE-1263Improper Physical Access ControlThe product is designed with access restricted to certain information, but it does not sufficiently protect against an unauthorized actor with physical access …
CWE-1264Hardware Logic with Insecure De-Synchronization between Control and Data ChannelsThe hardware logic for error handling and security checks can incorrectly forward data before the security check is complete.
CWE-1265Unintended Reentrant Invocation of Non-reentrant Code Via Nested CallsThe product invokes code that is believed to be reentrant, but the code performs a call that unintentionally produces a nested invocation of the non-reentrant …
CWE-1266Improper Scrubbing of Sensitive Data from Decommissioned DeviceThe product does not properly provide a capability for the product administrator to remove sensitive data at the time the product is decommissioned. A scrubbi…
CWE-1267Policy Uses Obsolete EncodingThe product uses an obsolete encoding mechanism to implement access controls.
CWE-1268Policy Privileges are not Assigned Consistently Between Control and Data AgentsThe product's hardware-enforced access control for a particular resource improperly accounts for privilege discrepancies between control and write policies. …
CWE-1269Product Released in Non-Release ConfigurationThe product released to market is released in pre-production or manufacturing configuration.
CWE-127Buffer Under-readThe product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
CWE-1270Generation of Incorrect Security TokensThe product implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However…
CWE-1271Uninitialized Value on Reset for Registers Holding Security SettingsSecurity-critical logic is not set to a known value on reset.
CWE-1272Sensitive Information Uncleared Before Debug/Power State TransitionThe product performs a power or debug state transition, but it does not clear sensitive information that should no longer be accessible due to changes to infor…
CWE-1273Device Unlock Credential SharingThe credentials necessary for unlocking a device are shared across multiple parties and may expose sensitive information.
CWE-1274Improper Access Control for Volatile Memory Containing Boot CodeThe product conducts a secure-boot process that transfers bootloader code from Non-Volatile Memory (NVM) into Volatile Memory (VM), but it does not have suffic…
CWE-1275Sensitive Cookie with Improper SameSite AttributeThe SameSite attribute for sensitive cookies is not set, or an insecure value is used. The SameSite attribute controls how cookies are sent for cross-domain r…
CWE-1276Hardware Child Block Incorrectly Connected to Parent SystemSignals between a hardware IP and the parent system design are incorrectly connected causing security risks.
CWE-1277Firmware Not UpdateableThe product does not provide its users with the ability to update or patch its firmware to address any vulnerabilities or weaknesses that may be prese…
CWE-1278Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging TechniquesInformation stored in hardware may be recovered by an attacker with the capability to capture and analyze images of the integrated circuit using techniques suc…
CWE-1279Cryptographic Operations are run Before Supporting Units are ReadyPerforming cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result. Many c…
CWE-128Wrap-around ErrorWrap around errors occur whenever a value is incremented past the maximum value for its type and therefore "wraps around" to a very small, negative, or undefin…
CWE-1280Access Control Check Implemented After Asset is AccessedA product's hardware-based access control check occurs after the asset has been accessed.
CWE-1281Sequence of Processor Instructions Leads to Unexpected BehaviorSpecific combinations of processor instructions lead to undesirable behavior such as locking the processor until a hard reset performed.
CWE-1282Assumed-Immutable Data is Stored in Writable MemoryImmutable data, such as a first-stage bootloader, device identifiers, and "write-once" configuration settings are stored in writable memory that can be re-prog…
CWE-1283Mutable Attestation or Measurement Reporting DataThe register contents used for attestation or measurement reporting data to verify boot flow are modifiable by an adversary.
CWE-1284Improper Validation of Specified Quantity in InputThe product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity…
CWE-1285Improper Validation of Specified Index, Position, or Offset in InputThe product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not valid…
CWE-1286Improper Validation of Syntactic Correctness of InputThe product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that …
Sourced from MITRE CWE 4.x XML. Curated by Adam Lundqvist, Founder at SQUR.
CWE weaknesses — by category | SQUR Knowledge Base