2469
[REF-1027]The Software Engineering Institute. "SEI CERT Perl Coding Standard : Rule
50. Miscellaneous (MSC)". < https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?
pageId=88890502 >.
Category-1195: Manufacturing and Life Cycle Management Concerns
Category ID : 1195
Summary
Weaknesses in this category are root-caused to defects that arise in the semiconductormanufacturing
process or during the life cycle and supply chain.
Membership
Nature Type ID Name Page
MemberOf 1194 Hardware Design 1194 2586
HasMember 1059 Insufficient Technical Documentation 1194 1894
HasMember 1248 Semiconductor Defects in Hardware Logic with
Security-Sensitive Implications
1194 2049
HasMember 1266 Improper Scrubbing of Sensitive Data from
Decommissioned Device
1194 2091
HasMember 1269 Product Released in Non-Release Configuration 1194 2098
HasMember 1273 Device Unlock Credential Sharing 1194 2106
HasMember 1297 Unprotected Confidential Information on Device is
Accessible by OSAT Vendors
1194 2156
Category-1196: Security Flow Issues
Category ID : 1196
Summary
Weaknesses in this category are related to improper design of full-system security flows, including
but not limited to secure boot, secure update, and hardware-device attestation.
Membership
Nature Type ID Name Page
MemberOf 1194 Hardware Design 1194 2586
HasMember 1190 DMA Device Enabled Too Early in Boot Phase 1194 1978
HasMember 1193 Power-On of Untrusted Execution Core Before Enabling
Fabric Access Control
1194 1986
HasMember 1264 Hardware Logic with Insecure De-Synchronization
between Control and Data Channels
1194 2086
HasMember 1274 Improper Access Control for Volatile Memory
Containing Boot Code
1194 2108
HasMember 1283 Mutable Attestation or Measurement Reporting Data 1194 2128
HasMember 1310 Missing Ability to Patch ROM Code 1194 2179
HasMember 1326 Missing Immutable Root of Trust in Hardware 1194 2212
HasMember 1328 Security Version Number Mutable to Older Versions 1194 2217
CWE Version 4.14
CWE-1197: Integration Issues
CWE-1197: Integration Issues