ICS Communications: Zone Boundary Failures

Opis

Weaknesses in this category are related to the "Zone Boundary Failures" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "Within an ICS system, for traffic that crosses through network zone boundaries, vulnerabilities arise when those boundaries were designed for safety or other purposes but are being repurposed for security." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.

Wpisy w tej grupie

• CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
• CWE-268 Privilege Chaining
• CWE-269 Improper Privilege Management
• CWE-287 Improper Authentication
• CWE-288 Authentication Bypass Using an Alternate Path or Channel
• CWE-306 Missing Authentication for Critical Function
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-384 Session Fixation
• CWE-434 Unrestricted Upload of File with Dangerous Type
• CWE-494 Download of Code Without Integrity Check
• CWE-501 Trust Boundary Violation
• CWE-668 Exposure of Resource to Wrong Sphere
• CWE-669 Incorrect Resource Transfer Between Spheres
• CWE-754 Improper Check for Unusual or Exceptional Conditions
• CWE-829 Inclusion of Functionality from Untrusted Control Sphere
• CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
• CWE-1263 Improper Physical Access Control
• CWE-1303 Non-Transparent Sharing of Microarchitectural Resources
• CWE-1393 Use of Default Password

Źródła