2025 MIHW Supplement: Expert Insights

Opis

Weaknesses in this category were not included in the 2025 Most Important Hardware Weaknesses (MIHW) because they did not have sufficient weakness data to support their inclusion. However, they stand out as expert-driven selections. Each of these weaknesses received high scores from Subject Matter Experts, reflecting strong consensus among those with deep domain knowledge.

Wpisy w tej grupie

• CWE-1231 Improper Prevention of Lock Bit Modification
• CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection
• CWE-1244 Internal Asset Exposed to Unsafe Debug Access Level or State
• CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition
• CWE-1431 Driving Intermediate Cryptographic State/Results to Hardware Module Outputs

Źródła