2242
Malicious software running on a core can execute instructions that consume maximum power
or increase core frequency. Such a power-virus program could execute on the platform for an
extended time to overheat the device, resulting in permanent damage.
Execution core and platform do not support thermal sensors, performance throttling, or platformcooling
countermeasures to ensure that any software executing on the system cannot cause
overheating past the maximum allowable temperature.
The platform and SoC should have failsafe thermal limits that are enforced by thermal sensors
that trigger critical temperature alerts when high temperature is detected. Upon detection of high
temperatures, the platform should trigger cooling or shutdown automatically.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1206 Power, Clock, Thermal, and Reset Concerns 1194 2473
MemberOf 1367 ICS Dependencies (& Architecture): External Physical
Systems
1358 2504
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
Related Attack Patterns
CAPEC-ID Attack Pattern Name
624 Hardware Fault Injection
625 Mobile Device Fault Injection
References
[REF-1156]Leonid Grustniy. "Loapi--This Trojan is hot!". 2017 December. < https://
www.kaspersky.com/blog/loapi-trojan/20510/ >.
CWE-1339: Insufficient Precision or Accuracy of a Real Number
Weakness ID : 1339
Structure : Simple
Abstraction : Base
Description
The product processes a real number with an implementation in which the number's representation
does not preserve required accuracy and precision in its fractional part, causing an incorrect result.
Extended Description
When a security decision or calculation requires highly precise, accurate numbers such as financial
calculations or prices, then small variations in the number could be exploited by an attacker.
There are multiple ways to store the fractional part of a real number in a computer. In all of these
cases, there is a limit to the accuracy of recording a fraction. If the fraction can be represented in a
fixed number of digits (binary or decimal), there might not be enough digits assigned to represent
the number. In other cases the number cannot be represented in a fixed number of digits due
to repeating in decimal or binary notation (e.g. 0.333333...) or due to a transcendental number
such as Π or √2. Rounding of numbers can lead to situations where the computer results do not
adequately match the result of sufficiently accurate math.
Relationships
CWE Version 4.14
CWE-1339: Insufficient Precision or Accuracy of a Real Number
CWE-1339: Insufficient Precision or Accuracy of a Real Number