Hardware security – CWE critical weakness report 2021
Uncategorized October 29th, 2021Old obsolete & insecure hardware should be retired & replaced with more secure new devices as a good security measure
2021 CWE Most Important Hardware Weaknesses | CISA
CWE – CWE Most Important Hardware Weaknesses (mitre.org)
The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2021 Common Weakness Enumeration (CWE) Most Important Hardware Weaknesses List. The 2021 Hardware List is a compilation of the most frequent and critical errors that can lead to serious vulnerabilities in hardware. An attacker can often exploit these vulnerabilities to take control of an affected system, obtain sensitive information, or cause a denial-of-service condition. CISA encourages users and administrators to review the Hardware Weaknesses List and evaluate recommended mitigations to determine those most suitable to adopt.
CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC) CWE-1191 On-Chip Debug and Test Interface With Improper Access Control CWE-1231 Improper Prevention of Lock Bit Modification CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection CWE-1240 Use of a Cryptographic Primitive with a Risky Implementation CWE-1244 Internal Asset Exposed to Unsafe Debug Access Level or State CWE-1256 Improper Restriction of Software Interfaces to Hardware Features CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code CWE-1277 Firmware Not Updateable CWE-1300 Improper Protection of Physical Side Channels