Weaknesses in the 2025 CWE Most Important Hardware Weaknesses List

Opis

CWE entries in this view are listed in the 2025 CWE Most Important Hardware Weaknesses List, as determined by the Hardware CWE Special Interest Group (HW CWE SIG). The 2025 MIHW aims to drive awareness of critical hardware weaknesses and provide the cybersecurity community with practical guidance to prevent security issues at the source. By combining advanced data analysis with expert consensus, the list helps organizations prioritize mitigations, strengthen design practices, and make informed decisions throughout the hardware lifecycle.

Wpisy w tej grupie

• CWE-226 Sensitive Information in Resource Not Removed Before Reuse
• CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
• CWE-1191 On-Chip Debug and Test Interface With Improper Access Control
• CWE-1234 Hardware Internal or Debug Modes Allow Override of Locks
• CWE-1247 Improper Protection Against Voltage and Clock Glitches
• CWE-1256 Improper Restriction of Software Interfaces to Hardware Features
• CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges
• CWE-1262 Improper Access Control for Register Interface
• CWE-1300 Improper Protection of Physical Side Channels
• CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution
• CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution
• CWE-1433 2025 MIHW Supplement: Expert Insights

Źródła