ICS Supply Chain: Common Mode Frailties

Opis

Weaknesses in this category are related to the "Common Mode Frailties" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "At the component level, most ICS systems are assembled from common parts made by other companies. One or more of these common parts might contain a vulnerability that could result in a wide-spread incident." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.

Wpisy w tej grupie

• CWE-664 Improper Control of a Resource Through its Lifetime
• CWE-707 Improper Neutralization
• CWE-710 Improper Adherence to Coding Standards
• CWE-1357 Reliance on Insufficiently Trustworthy Component
• CWE-329 Generation of Predictable IV with CBC Mode
• CWE-693 Protection Mechanism Failure

Uwagi

Relationships in this category are not authoritative and subject to change. See Maintenance notes.

Źródła