ICS Supply Chain: Poorly Documented or Undocumented Features

Opis

Weaknesses in this category are related to the "Poorly Documented or Undocumented Features" category from the SEI ETF "Categories of Security Vulnerabilities in ICS" as published in March 2022: "Undocumented capabilities and configurations pose a risk by not having a clear understanding of what the device is specifically supposed to do and only do. Therefore possibly opening up the attack surface and vulnerabilities." Note: members of this category include "Nearest IT Neighbor" recommendations from the report, as well as suggestions by the CWE team. These relationships are likely to change in future CWE versions.

Wpisy w tej grupie

• CWE-489 Active Debug Code
• CWE-912 Hidden Functionality
• CWE-1059 Insufficient Technical Documentation
• CWE-1242 Inclusion of Undocumented Features or Chicken Bits

Uwagi

Relationships in this category are not authoritative and subject to change. See Maintenance notes.

Źródła