ICS Communications: Unreliability

Opis

Weaknesses in this category are related to the "Unreliability" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "Vulnerabilities arise in reaction to disruptions in the physical layer (e.g. creating electrical noise) used to carry the traffic." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.

Wpisy w tej grupie

• CWE-121 Stack-based Buffer Overflow
• CWE-269 Improper Privilege Management
• CWE-306 Missing Authentication for Critical Function
• CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-807 Reliance on Untrusted Inputs in a Security Decision
• CWE-1247 Improper Protection Against Voltage and Clock Glitches
• CWE-1261 Improper Handling of Single Event Upsets
• CWE-1332 Improper Handling of Faults that Lead to Instruction Skips
• CWE-1351 Improper Handling of Hardware Behavior in Exceptionally Cold Environments
• CWE-1384 Improper Handling of Physical or Environmental Conditions

Źródła