| CWE |
Name |
|
Actions |
| CWE-1390 |
Weak Authentication |
|
|
| CWE-139 |
DEPRECATED: General Special Element Problems |
|
|
| CWE-1389 |
Incorrect Parsing of Numbers with Different Radices |
|
|
| CWE-1388 |
Physical Access Issues and Concerns |
|
|
| CWE-1386 |
Insecure Operation on Windows Junction / Mount Point |
|
|
| CWE-1385 |
Missing Origin Validation in WebSockets |
|
|
| CWE-1384 |
Improper Handling of Physical or Environmental Conditions |
|
|
| CWE-1383 |
ICS Operations (& Maintenance): Compliance/Conformance with Regulatory Requirements |
|
|
| CWE-1382 |
ICS Operations (& Maintenance): Emerging Energy Technologies |
|
|
| CWE-1381 |
ICS Operations (& Maintenance): Exploitable Standard Operational Procedures |
|
|
| CWE-1380 |
ICS Operations (& Maintenance): Post-analysis changes |
|
|
| CWE-138 |
Improper Neutralization of Special Elements |
|
|
| CWE-1379 |
ICS Operations (& Maintenance): Human factors in ICS environments |
|
|
| CWE-1378 |
ICS Operations (& Maintenance): Gaps in obligations and training |
|
|
| CWE-1377 |
ICS Engineering (Construction/Deployment): Inherent Predictability in Design |
|
|
| CWE-1376 |
ICS Engineering (Construction/Deployment): Security Gaps in Commissioning |
|
|
| CWE-1375 |
ICS Engineering (Construction/Deployment): Gaps in Details/Data |
|
|
| CWE-1374 |
ICS Engineering (Construction/Deployment): Maker Breaker Blindness |
|
|
| CWE-1373 |
ICS Engineering (Construction/Deployment): Trust Model Problems |
|
|
| CWE-1372 |
ICS Supply Chain: OT Counterfeit and Malicious Corruption |
|
|
| CWE-1371 |
ICS Supply Chain: Poorly Documented or Undocumented Features |
|
|
| CWE-1370 |
ICS Supply Chain: Common Mode Frailties |
|
|
| CWE-137 |
Data Neutralization Issues |
|
|
| CWE-1369 |
ICS Supply Chain: IT/OT Convergence/Expansion |
|
|
| CWE-1368 |
ICS Dependencies (& Architecture): External Digital Systems |
|
|
| CWE-1367 |
ICS Dependencies (& Architecture): External Physical Systems |
|
|
| CWE-1366 |
ICS Communications: Frail Security in Protocols |
|
|
| CWE-1365 |
ICS Communications: Unreliability |
|
|
| CWE-1364 |
ICS Communications: Zone Boundary Failures |
|
|
| CWE-1363 |
ICS Operations (& Maintenance) |
|
|
| CWE-1362 |
ICS Engineering (Constructions/Deployment) |
|
|
| CWE-1361 |
ICS Supply Chain |
|
|
| CWE-1360 |
ICS Dependencies (& Architecture) |
|
|
| CWE-136 |
Type Errors |
|
|
| CWE-1359 |
ICS Communications |
|
|
| CWE-1357 |
Reliance on Insufficiently Trustworthy Component |
|
|
| CWE-1356 |
OWASP Top Ten 2021 Category A10:2021 - Server-Side Request Forgery (SSRF) |
|
|
| CWE-1355 |
OWASP Top Ten 2021 Category A09:2021 - Security Logging and Monitoring Failures |
|
|
| CWE-1354 |
OWASP Top Ten 2021 Category A08:2021 - Software and Data Integrity Failures |
|
|
| CWE-1353 |
OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures |
|
|
