Is a single exploit against this weakness applicable to a wide range (or family) of devices?
What methodologies do you practice for identifying and preventing both known weaknesses and new weaknesses?
When reflecting on the 31 entries identified during the initial survey, the SIG determined that the ideal length for a published “Top-N” list should be approximately ten percent of the total hardware CWE entries – roughly 10. Accordingly, the SIG convened to hold a formal voting session to distill the previously selected 31 entries in September 2021. Using a card-sorting platform and a Likert-scale approach, each SIG member had the opportunity to transfer the 31 entries into various "buckets" of priority (via drag and drop). There were five buckets:
Strongly Support – (for inclusion in the Top-N)