970 indexed

CWECWE weaknesses

970 MITRE CWE entries — software weakness types that underlie vulnerabilities (CVE→CWE link). Filter by category. Authored by Adam Lundqvist.

Showing 201–250 of 970 · page 5 of 20

IDTitleSummary
CWE-1287Improper Validation of Specified Type of InputThe product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expect…
CWE-1288Improper Validation of Consistency within InputThe product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validate…
CWE-1289Improper Validation of Unsafe Equivalence in InputThe product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that th…
CWE-129Improper Validation of Array IndexThe product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the i…
CWE-1290Incorrect Decoding of Security IdentifiersThe product implements a decoding mechanism to decode certain bus-transaction signals to security identifiers. If the decoding is implemented incorrectly, then…
CWE-1291Public Key Re-Use for Signing both Debug and Production CodeThe same public key is used for signing both debug and production code.
CWE-1292Incorrect Conversion of Security IdentifiersThe product implements a conversion mechanism to map certain bus-transaction signals to security identifiers. However, if the conversion is incorrectly impleme…
CWE-1293Missing Source Correlation of Multiple Independent DataThe product relies on one source of data, preventing the ability to detect if an adversary has compromised a data source.
CWE-1294Insecure Security Identifier MechanismThe System-on-Chip (SoC) implements a Security Identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from …
CWE-1295Debug Messages Revealing Unnecessary InformationThe product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.
CWE-1296Incorrect Chaining or Granularity of Debug ComponentsThe product's debug components contain incorrect chaining or granularity of debug components.
CWE-1297Unprotected Confidential Information on Device is Accessible by OSAT VendorsThe product does not adequately protect confidential information on the device from being accessed by Outsourced Semiconductor Assembly and Test (OSAT) vendors.
CWE-1298Hardware Logic Contains Race ConditionsA race condition in the hardware logic results in undermining security guarantees of the system.
CWE-1299Missing Protection Mechanism for Alternate Hardware InterfaceThe lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other e…
CWE-13ASP.NET Misconfiguration: Password in Configuration FileStoring a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource making them an easy target f…
CWE-130Improper Handling of Length Parameter InconsistencyThe product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length o…
CWE-1300Improper Protection of Physical Side ChannelsThe device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physica…
CWE-1301Insufficient or Incomplete Data Removal within Hardware ComponentThe product's data removal process does not completely delete all data and potentially sensitive information within hardware components.
CWE-1302Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)The product implements a security identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. A …
CWE-1303Non-Transparent Sharing of Microarchitectural ResourcesHardware structures shared across execution contexts (e.g., caches and branch predictors) can violate the expected architecture isolation between contexts.
CWE-1304Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore OperationThe product performs a power save/restore operation, but it does not ensure that the integrity of the configuration state is maintained…
CWE-131Incorrect Calculation of Buffer SizeThe product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
CWE-1310Missing Ability to Patch ROM CodeMissing an ability to patch ROM code may leave a System or System-on-Chip (SoC) in a vulnerable state.
CWE-1311Improper Translation of Security Attributes by Fabric BridgeThe bridge incorrectly translates security attributes from either trusted to untrusted or from untrusted to trusted when converting from one fabric protocol to…
CWE-1312Missing Protection for Mirrored Regions in On-Chip Fabric FirewallThe firewall in an on-chip fabric protects the main addressed region, but it does not protect any mirrored memory or memory-mapped-IO (MMIO) regions.
CWE-1313Hardware Allows Activation of Test or Debug Logic at RuntimeDuring runtime, the hardware allows for test or debug logic (feature) to be activated, which allows for changing the state of the hardware. This feature can al…
CWE-1314Missing Write Protection for Parametric Data ValuesThe device does not write-protect the parametric data values for sensors that scale the sensor value, allowing untrusted software to manipulate the apparent re…
CWE-1315Improper Setting of Bus Controlling Capability in Fabric End-pointThe bus controller enables bits in the fabric end-point to allow responder devices to control transactions on the fabric.
CWE-1316Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected RangesThe address map of the on-chip fabric has protected and unprotected regions overlapping, allowing an attacker to bypass access control to the overlapping porti…
CWE-1317Improper Access Control in Fabric BridgeThe product uses a fabric bridge for transactions between two Intellectual Property (IP) blocks, but the bridge does not properly perform the expected privileg…
CWE-1318Missing Support for Security Features in On-chip Fabrics or BusesOn-chip fabrics or buses either do not support or are not configured to support privilege separation or other security features, such as access control.
CWE-1319Improper Protection against Electromagnetic Fault Injection (EM-FI)The device is susceptible to electromagnetic fault injection attacks, causing device internal information to be compromised or security mechanisms to be bypass…
CWE-132DEPRECATED: Miscalculated Null TerminationThis entry has been deprecated because it was a duplicate of CWE-170. All content has been transferred to CWE-170.
CWE-1320Improper Protection for Outbound Error Messages and Alert SignalsUntrusted agents can disable alerts about signal conditions exceeding limits or the response mechanism that handles such alerts.
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly co…
CWE-1322Use of Blocking Code in Single-threaded, Non-blocking ContextThe product uses a non-blocking model that relies on a single threaded process for features such as scalability, but it contains code that can block when it…
CWE-1323Improper Management of Sensitive Trace DataTrace data collected from several sources on the System-on-Chip (SoC) is stored in unprotected locations or transported to untr…
CWE-1324DEPRECATED: Sensitive Information Accessible by Physical Probing of JTAG InterfaceThis entry has been deprecated because it was at a lower level of abstraction than supported by CWE. All relevant content has been integrated into CWE-319.
CWE-1325Improperly Controlled Sequential Memory AllocationThe product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount …
CWE-1326Missing Immutable Root of Trust in HardwareA missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.
CWE-1327Binding to an Unrestricted IP AddressThe product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.
CWE-1328Security Version Number Mutable to Older VersionsSecurity-version number in hardware is mutable, resulting in the ability to downgrade (roll-back) the boot firmware to vulnerable code versions.
CWE-1329Reliance on Component That is Not UpdateableThe product contains a component that cannot be updated or patched in order to remove vulnerabilities or significant bugs.
CWE-1330Remanent Data Readable after Memory EraseConfidential information stored in memory circuits is readable or recoverable after being cleared or erased.
CWE-1331Improper Isolation of Shared Resources in Network On Chip (NoC)The Network On Chip (NoC) does not isolate or incorrectly isolates its on-chip-fabric and internal resources such that they are shared between trusted and untr…
CWE-1332Improper Handling of Faults that Lead to Instruction SkipsThe device is missing or incorrectly implements circuitry or sensors that detect and mitigate the skipping of security-critical CPU instructions when they occu…
CWE-1333Inefficient Regular Expression ComplexityThe product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
CWE-1334Unauthorized Error Injection Can Degrade Hardware RedundancyAn unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.
CWE-1335Incorrect Bitwise Shift of IntegerAn integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value causing an une…
CWE-1336Improper Neutralization of Special Elements Used in a Template EngineThe product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or …
Sourced from MITRE CWE 4.x XML. Curated by Adam Lundqvist, Founder at SQUR.
CWE weaknesses — by category | SQUR Knowledge Base