780
a router, but they might not be authorized to collect the underlying data. As a result, network traffic
could be sniffed by adversaries, spilling security-critical data.
Applicable communication channels are not limited to software products. Applicable channels
include hardware-specific technologies such as internal hardware networks and external debug
channels, supporting remote JTAG debugging. When mitigations are not applied to combat
adversaries within the product's threat model, this weakness significantly lowers the difficulty of
exploitation by such adversaries.
When full communications are recorded or logged, such as with a packet dump, an adversary could
attempt to obtain the dump long after the transmission has occurred and try to "sniff" the cleartext
from the recorded communications in the dump itself. Even if the information is encoded in a way
that is not human-readable, certain techniques could determine which encoding is being used, then
decode the information.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 311 Missing Encryption of Sensitive Data 757
ParentOf 5 J2EE Misconfiguration: Data Transmission Without
Encryption