2199
ParentOf 1326 Missing Immutable Root of Trust in Hardware 2212
ParentOf 1338 Improper Protections Against Hardware Overheating 2240
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Technology : ICS/OT (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control Bypass Protection Mechanism
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 975 SFP Secondary Cluster: Architecture 888 2406
MemberOf 1370 ICS Supply Chain: Common Mode Frailties 1358 2507
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
Notes
Research Gap
The concept of protection mechanisms is well established, but protection mechanism failures
have not been studied comprehensively. It is suspected that protection mechanisms can have
significantly different types of weaknesses than the weaknesses that they are intended to
prevent.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
1 Accessing Functionality Not Properly Constrained by ACLs
17 Using Malicious Files
20 Encryption Brute Forcing
22 Exploiting Trust in Client
36 Using Unpublished Interfaces or Functionality
51 Poison Web Service Registry
57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
59 Session Credential Falsification through Prediction
65 Sniff Application Code
74 Manipulating State
87 Forceful Browsing
107 Cross Site Tracing
127 Directory Indexing
237 Escaping a Sandbox by Calling Code in Another Language
477 Signature Spoofing by Mixing Signed and Unsigned Content
480 Escaping Virtualization
CWE Version 4.14
CWE-694: Use of Multiple Resources with Duplicate Identifier
CWE-694: Use of Multiple Resources with Duplicate Identifier