ICS Dependencies (& Architecture): External Physical Systems

Opis

Weaknesses in this category are related to the "External Physical Systems" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "Due to the highly interconnected technologies in use, an external dependency on another physical system could cause an availability interruption for the protected system." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.

Wpisy w tej grupie

• CWE-1247 Improper Protection Against Voltage and Clock Glitches
• CWE-1338 Improper Protections Against Hardware Overheating
• CWE-1357 Reliance on Insufficiently Trustworthy Component
• CWE-1384 Improper Handling of Physical or Environmental Conditions

Uwagi

Relationships in this category are not authoritative and subject to change. See Maintenance notes.

This category was created in CWE 4.7 to facilitate and illuminate discussion about weaknesses in ICS with [REF-1248] as a starting point. After the release of CWE 4.9 in October 2022, this has been under active review by members of the "Boosting CWE" subgroup of the CWE-CAPEC ICS/OT Special Interest Group (SIG). Relationships are still subject to change. In addition, there may be some issues in [REF-1248] that are outside of the current scope of CWE, which will require consultation with many CWE stakeholders to resolve.

Źródła