CWE-1199 Categorie Detail

CWE-1199

General Circuit and Logic Design Concerns
Draft
2020-02-24 +00:00
2023-06-29 +00:00
CWE Mitre.org
Notifications for a CWE
Stay informed of any changes for a specific CWE.
Notifications manage

Name: General Circuit and Logic Design Concerns

Weaknesses in this category are related to hardware-circuit design and logic (e.g., CMOS transistors, finite state machines, and registers) as well as issues related to hardware description languages such as System Verilog and VHDL.

CWE Members List

CWE-1209: Failure to Disable Reserved Bits Base

CWE-1221: Incorrect Register Defaults or Module Parameters Base

CWE-1223: Race Condition for Write-Once Attributes Base

CWE-1224: Improper Restriction of Write-Once Bit Fields Base

CWE-1231: Improper Prevention of Lock Bit Modification Base

CWE-1232: Improper Lock Behavior After Power State Transition Base

CWE-1233: Security-Sensitive Hardware Controls with Missing Lock Bit Protection Base

CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks Base

CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic Base

CWE-1250: Improper Preservation of Consistency Between Independent Representations of Shared State Base

CWE-1253: Incorrect Selection of Fuse Values Base

CWE-1254: Incorrect Comparison Logic Granularity Base

CWE-1261: Improper Handling of Single Event Upsets Base

CWE-1298: Hardware Logic Contains Race Conditions Base

CWE Informations

Vulnerability Mapping Notes

Justification : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Comment : See member weaknesses of this category.

Submission

Name Organization Date Date release Version
CWE Content Team MITRE 2019-12-27 +00:00 2020-02-24 +00:00 4.0

Modifications

Name Organization Date Comment
CWE Content Team MITRE 2020-06-25 +00:00 updated Relationships
CWE Content Team MITRE 2020-08-20 +00:00 updated Relationships
CWE Content Team MITRE 2023-01-31 +00:00 updated Relationships
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.