2241
overheating but the mitigations and examples included in this submission cannot reliably protect
against a battery failure.
There can be similar weaknesses with lack of protection from attacks based on overvoltage or
overcurrent conditions. However, thermal heat is generated by hardware operation and the device
should implement protection from overheating.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 693 Protection Mechanism Failure 1520
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Technology : ICS/OT (Prevalence = Undetermined)
Technology : Power Management Hardware (Prevalence = Undetermined)
Technology : Processor Hardware (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Availability DoS: Resource Consumption (Other) High
Detection Methods
Dynamic Analysis with Manual Results Interpretation
Dynamic tests should be performed to stress-test temperature controls.
Effectiveness = High
Architecture or Design Review
Power management controls should be part of Architecture and Design reviews.
Effectiveness = High
Potential Mitigations
Phase: Architecture and Design
Temperature maximum and minimum limits should be enforced using thermal sensors both in
silicon and at the platform level.
Phase: Implementation
The platform should support cooling solutions such as fans that can be modulated based on
device-operation needs to maintain a stable temperature.
Demonstrative Examples
Example 1:
CWE Version 4.14
CWE-1339: Insufficient Precision or Accuracy of a Real Number
CWE-1339: Insufficient Precision or Accuracy of a Real Number